https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-01T18:28:14.642025+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-119561 CVE-2026-119561 — phpMyAdmin through 5.2.3 WebAuthn Two-Factor Authentication Bypass via CustomServer 2026-11-01T18:28:14.643347+00:00

Affected: phpMyAdmin

phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in CustomServer::parseAndValidateAssertionResponse() that never verifies WebAuthn assertion signatures against stored public keys. Attackers holding a victim's MySQL credentials can POST a crafted webauthn_request_response with matching challenge, origin, and rpIdHash to bypass the second factor and gain database privileges.