| CVE-2026-116241 |
pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier
|
9.9
Critical
|
Oct 30, 2026 |
| CVE-2026-86863 |
pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse…
|
9.8
Critical
|
Sep 17, 2026 |
| CVE-2026-17566 |
pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query…
|
9.9
Critical
|
Jul 31, 2026 |
| CVE-2026-17351 |
The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's…
|
9.0
Critical
|
Jul 31, 2026 |
| CVE-2026-17349 |
/misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed the id…
|
9.6
Critical
|
Jul 31, 2026 |
| CVE-2026-12048 |
Stored cross-site scripting in pgAdmin 4's error-rendering and plan-node-rendering paths
|
9.3
Critical
|
Jun 18, 2026 |
| CVE-2026-12046 |
Two state-mutating endpoints in pgAdmin 4's SQL Editor blueprint -- DELETE /sqleditor/close/ and POST…
|
9.0
Critical
|
Jun 18, 2026 |
| CVE-2026-12045 |
Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database content that…
|
9.0
Critical
|
Jun 18, 2026 |
| CVE-2026-7813 |
Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background…
|
9.9
Critical
|
May 11, 2026 |
| CVE-2025-13780 |
Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)
|
9.1
Critical
|
Dec 11, 2025 |
| CVE-2025-12762 |
pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in…
|
9.1
Critical
|
Nov 13, 2025 |
| CVE-2025-2946 |
pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS)
|
9.1
Critical
|
Apr 3, 2025 |
| CVE-2025-2945 |
Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules)
|
9.9
Critical
|
Apr 3, 2025 |
| CVE-2024-9014 |
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication
|
9.9
Critical
|
Sep 23, 2024 |