CVE-2026-56703
ADVISORY - nistSummary
Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server.
EPSS Score: 0.01171 (0.666)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Improper Control of Generation of Code ('Code Injection')
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-56703
EXPLOITABILITY SCORE
1.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
8.6highDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-56703
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-56703
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-