Threat Intel

v0.1

← CVEs

CVE-2026-25878

MED 5.3
Published
2026-02-09
Last Modified
2026-02-28
Affected Apps
1
Affected Devices
1
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route (/admin/adminer) was accessible without Shopware admin authentication. The route was configured with auth_required=false and performed no session validation, exposing the Adminer UI to unauthenticated users. This vulnerability is fixed in 2.2.1.
Affected Applications in Environment 1
adminer v4.2.1-1ubuntu1
1 device
Affected Devices 1
web22 Linux
References 3