CVEs in the news
Every CVE named in CyberSIXT coverage this week, with its severity, CISA KEV status and exploit probability.
| CVE | Vulnerability | CVSS | Exploitation | EPSS | Articles | Seen |
|---|---|---|---|---|---|---|
| CVE-2026-119563 | phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table NamephpMyAdmin | 5.4Medium | Not in KEV | EPSS 0.2% | 1 article | |
| CVE-2026-119561 | phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServerphpMyAdmin | 7.6High | Not in KEV | EPSS 0.2% | 1 article | |
| CVE-2026-119429 | phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/setphpMyAdmin | 5.3Medium | Not in KEV | EPSS 0.4% | 1 article | |
| CVE-2026-119428 | phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup DisabledphpMyAdmin | 6.3Medium | Not in KEV | EPSS 0.3% | 1 article | |
| CVE-2026-119427 | phpMyAdmin through 5.2.3 SQL Injection via Designer saveSettingphpMyAdmin | 4.2Medium | Not in KEV | EPSS 0.2% | 1 article | |
| CVE-2026-119426 | phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sqlphpMyAdmin | 7.7High | Not in KEV | EPSS 0.3% | 1 article |
No CVE on this page matches. Clear the filter, or search every CVE.
All 6 CVEs in the news this week · 391 exploited CVEs in the CISA KEV catalogue.