Skip to content
Sign in

Vendor

phpMyAdmin

Alert
No CISA KEV deadline is open. CISA last added a phpMyAdmin CVE on 25 Mar 2022.

Tracked since 3 Nov · latest article 3 Nov · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 1 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

1Articles · 7 days

usual rate

Exploited, by due date1

phpMyAdmin CVEs in CISA KEV with their federal deadlines. None is open.

Exploited phpMyAdmin CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2009-1151phpMyAdmin25 MarPassed 15 Apr–
CSV of 1 entry for phpMyAdmin

Patch cadence and exploit odds

How often CISA adds phpMyAdmin CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’260Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

No additions in the last eight quarters.

Fix listed

4 of 6 CVEs in coverage

2 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-119429: 31.4th percentileCVE-2026-119428: 24.2th percentileCVE-2026-119426: 20.9th percentileCVE-2026-119427: 13.1th percentileCVE-2026-119561: 8.2th percentileCVE-2026-119563: 6.5th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-11942931.4
CVE-2026-11942824.2
CVE-2026-11942620.9
CVE-2026-11942713.1
CVE-2026-1195618.2
CVE-2026-1195636.5

Coverage1 article · all time

The latest article naming phpMyAdmin, in the shared story grammar.

Full timeline
Developinglatest 3 hours ago1 article1 outlet

1 article from 1 outlet since 3 Nov. Still developing; the latest report was 3 hours ago.

Now3 NovFirst reportSecurityOnline · 3 Nov, 05:00
  • Tue 3 Nov, 05:00 UTC. SecurityOnline, first report. Seven phpMyAdmin vulnerabilities expose users to account attacks.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
Show all 1 articles as a list
  1. Tue 3 NovDay 01
    1. Seven phpMyAdmin vulnerabilities expose users to account attacks05:00 · SecurityOnline · First report

All CVEs in coverage6

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-119429

    phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set

    5.3Medium0.4% EPSS · 1 article
  • CVE-2026-119428

    phpMyAdmin through 5.2.3 SSRF via setup/validate.php After Setup Disabled

    6.3Medium0.3% EPSS · 1 article
  • CVE-2026-119426

    phpMyAdmin through 5.2.3 CSRF Token Bypass via Non-AJAX POST to /sql

    7.7High0.3% EPSS · 1 article
  • CVE-2026-119427

    phpMyAdmin through 5.2.3 SQL Injection via Designer saveSetting

    4.2Medium0.2% EPSS · 1 article
  • CVE-2026-119561

    phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer

    7.6High0.2% EPSS · 1 article
  • CVE-2026-119563

    phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name

    5.4Medium0.2% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in