CVE-2026-15686

The record

Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adminer. Authentication is required to exploit this vulnerability. The specific flaw exists within the multi_query method. The issue results from an incorrect check of a function return value. An attacker can leverage this vulnerability to execute code in the context of the web server. Was ZDI-CAN-28201.

Affected packages

Related vulnerabilities

• CVE-2026-59847 A flaw was found in libssh. CWE-253
• CVE-2026-5818 Incorrect check of function return value in Caliptra Core Runtime Firmware… CWE-253
• CVE-2026-46419 Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly… CWE-253
• CVE-2026-43863 mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. CWE-253
• GHSA-88ch-q68x-36v7 uutils coreutils has an Incorrect Check of Function Return Value CWE-253
• GHSA-vp6q-mv9j-j428 uutils coreutils incorrectly handles exit codes when processing multiple files CWE-253
• CVE-2026-35340 A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities… CWE-253
• CVE-2026-35339 The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit… CWE-253