CVE-2026-15686

Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adminer. Authentication is required to exploit this vulnerability. The specific flaw exists within the multi_query method. The issue results from an incorrect check of a function return value. An attacker can leverage this vulnerability to execute code in the context of the web server. Was ZDI-CAN-28201.

• CWE-253

• https://github.com/vrana/adminer/security/advisories/GHSA-3582-q6xq-5vf7#event-826206
• https://www.zerodayinitiative.com/advisories/ZDI-26-478/

Published

Aug 20, 2026

Last Modified

Sep 1, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-15680Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format…7.5
• CVE-2026-15681AnyDesk Screen Recording Link Following Denial-of-Service Vu…5.5
• CVE-2026-15682AnyDesk Support Information Link Following Denial-of-Service…5.5
• CVE-2026-15683Lorex 2K Indoor Wi-Fi Security Camera Device Management Serv…7.5
• CVE-2026-15684Glarysoft Glary Utilities Link Following Local Privilege Esc…7.3
• CVE-2026-15685Ollama downloadBlob Improper Validation of Array Index Denia…7.5
• CVE-2026-15687A security issue was discovered in the Kubernetes Java clien…2.4
• CVE-2026-15688Incorrect Implementation of Authentication Algorithm Vulnera…9.2
• CVE-2026-15689Dancer2::Plugin::Auth::Extensible versions through 0.713 for…9.8
• CVE-2026-1569The Wueen plugin for WordPress is vulnerable to Stored Cross…6.4
• CVE-2026-15690A vulnerability was identified in open62541 up to 1.5.5. Aff…3.1
• CVE-2026-15691A security flaw has been discovered in Tenda BE12 Pro 16.03.…8.8