CVE-2026-121262
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
71/100
Published: 2026-11-03
Modified: 2026-11-09
First seen: 2026-11-03
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
X
AT:
None
VC:
None
VI:
None
VA:
Low
Description
A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. The affected element is the function parse of the file src/Statements/ExplainStatement.php. Performing a manipulation of the argument nextToken results in incorrect type conversion. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness Classification (1)
Affected Software (4)
| Vendor | Product | Version |
|---|---|---|
| phpMyAdmin | SQL-Parser | 6.0.0 |
| phpMyAdmin | SQL-Parser | 6.0.1 |
| phpMyAdmin | SQL-Parser | 6.0.0 |
| phpMyAdmin | SQL-Parser | 6.0.1 |