Machine-generated analysis · WAYSCloud LLM
Adminer installations are vulnerable to remote code execution due to an incorrect check of the multi_query function’s return value.
Context
The advisory targets the Adminer database management tool. It describes an incorrect check of the multi_query function return value that can be leveraged for remote code execution, requiring authentication. The advisory assigns a CVSS score of 7.2 to this issue.
Operator considerations
Check: inventory Adminer installations and verify the version and configuration of the multi_query function.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adminer. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-15686.
Read the full advisory on ZDI →