A
Adminer
Security Risk Profile
45
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 5, 2018 to present
10
Total CVEs
7
Critical+High
1
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
3%
Exploit probability
Unpatched
3
Critical/High
Risk Level
45/100
medium
⚠️ 1 Active Exploits📈 1 in Last 30 Days
Severity Distribution
Critical
1High
6Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
SSRF
3
2
XSS
2
3
Input Validation
1
4
CSRF
1
5
SQL Injection
1
Most Affected Products
1. Adminer Adminer12
2. composer/vrana/adminer4
3. AdminerEvo AdminerEvo3
4. Debian Debian Linux2
5. Adminer AdminerEvo1
Recent Vulnerabilities
See more →CVE-2026-63771
CVSS 6.0medium
Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header
Jul 20, 2026🔧 No Patch
CVE-2026-25892
CVSS 7.5EPSS 3%high
Adminer has an Unauthenticated Persistent DoS via Array Injection in ?script=version Endpoint
Feb 9, 2026
CVE-2025-43960
CVSS 8.6high
Aug 25, 2025🔧 No Patch
CVE-2023-45195
CVSS 6.9medium
Adminer and AdminerEvo SSRF
Jun 24, 2024
CVE-2023-45196
CVSS 7.5high
Adminer and AdminerEvo denial of service via HTTP redirect
Jun 24, 2024
CVE-2021-43008
CVSS 7.5high
Apr 5, 2022🔧 No Patch
CVE-2021-29625
CVSS 7.5high
XSS in doc_link
May 19, 2021
CVE-2021-21311
CVSS 7.2high
Adminer Server-Side Request Forgery Vulnerability
Feb 11, 2021⚠ Exploited🔧 No Patch
CVE-2020-35572
CVSS 6.1medium
Feb 9, 2021
CVE-2018-7667
CVSS 9.8critical
Mar 5, 2018
Monitor Adminer in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.