Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-104959. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This is a functional exploit for an SSRF vulnerability in Adminer <= v4.3.1, allowing unauthenticated port scanning of internal systems via crafted HTTP requests. The included 'PortMiner' tool automates the process by analyzing error responses to determine open/closed ports.
Description
Adminer 4.3.1 - Server-Side Request Forgery
Exploits (1)
exploitdb
WORKING POC
by hyp3rlinx · textwebappsphp
https://www.exploit-db.com/exploits/43593
This is a functional exploit for an SSRF vulnerability in Adminer <= v4.3.1, allowing unauthenticated port scanning of internal systems via crafted HTTP requests. The included 'PortMiner' tool automates the process by analyzing error responses to determine open/closed ports.
Classification
Working Poc 95%
Attack Type
Ssrf
Complexity
Moderate
Reliability
Reliable
Target:
Adminer <= v4.3.1
No auth needed
Prerequisites:
Access to a vulnerable Adminer instance · Network connectivity to the target system
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026