https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-01T17:05:51.904283+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-119561 fkie_cve-2026-119561 2026-11-01T17:05:51.925159+00:00

phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse() that never verifies WebAuthn assertion signatures against stored public keys. Attackers holding a victim's MySQL credentials can POST a crafted webauthn_request_response with matching challenge, origin, and rpIdHash to bypass the second factor and gain database privileges.

 https://db.gcve.eu/vuln/ghsa-hmm7-jqq6-vwhr GHSA-hmm7-jqq6-vwhr 2026-11-01T17:05:51.925332+00:00

phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse() that never verifies WebAuthn assertion signatures against stored public keys. Attackers holding a victim's MySQL credentials can POST a crafted webauthn_request_response with matching challenge, origin, and rpIdHash to bypass the second factor and gain database privileges.