AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-9849

CRITICAL · CVSS 9.8 EPSS 1.96%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-12-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2016-9849
Severity
CRITICAL
CVSS
9.8
EPSS
1.96%

Original NVD Description

An issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg['Servers'][$i]['AllowRoot']) and deny rules for username by using Null Byte in the username. All 4.6.x versions (prior to 4.6.5), 4.4.x versions (prior to 4.4.15.9), and 4.0.x versions (prior to 4.0.10.18) are affected.