Threats tagged 'ghsa-vp6j-3f4x-2qrh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-119429phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to Medium5.32026-10-30GCVE DatabaseCVE-2026-119429 phpMyAdmin versions up to 5.2.3 have a vulnerability where authenticated attackers can bypass two-factor authentication (2FA) by sending a specially crafted request to the /config/set endpoint. This allows attackers with a hijacked session to disable 2FA, making subsequent logins require only the MySQL password. Report on CVE-2026-119429 Vulnerability CWE-620 #ghsa-vp6j-3f4x-2qrh	GCVE Database	2026-10-30

Page 1 of 1