Adminer Server-Side Request Forgery Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 29/09/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| vrana/adminer | < 4.7.9 | 4.7.9 |
| adminer | ≥ 4.0.0, < 4.7.9 | 4.7.9 |
Users of Adminer versions bundling all drivers (e.g. adminer.php) are affected.
Patched by ccd2374b, included in version 4.7.9.
adminer-mysql.php).https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free