CVE-2026-25878 - FroshAdminer Adminer UI is accessible without admin session

CVE ID : CVE-2026-25878 Published : Feb. 9, 2026, 9:15 p.m. | 1 hour, 7 minutes ago Description : FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route (/admin/adminer) was accessible without Shopware admin authentication. The route was configured with auth_required=false and performed no session validation, exposing the Adminer UI to unauthenticated users. This vulnerability is fixed in 2.2.1. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...