p PatchFirst

PatchFirst · Latest vulnerabilities

frosh/adminer-platform vulnerabilities

Vulnerabilities published for frosh/adminer-platform in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-25878

    Medium · CVSS 6.9EPSS 0.41%Fix available

    FroshAdminer Adminer UI is accessible without admin session

    FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route (/admin/adminer) was accessible without Shopware admin authentication. The route was configured with auth_required=false and performed no session validation, exposing the Adminer UI to unauthenticated users. This vulnerability is fixed in 2.2.1.

    frosh/adminer-platformPHP
    • Update to 2.2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →