9.1
Critique
CVE-2025-12762 pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in…
Description
pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| pgAdmin 4 9.9 | premières → 9.9 | Pas de correctif indiqué |
Autres CVE de pgAdmin 4
Les 56 CVE de pgAdmin 4 →
CVE-2026-116252
pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name
6.5
Moyenne
CVE-2026-116251
pgAdmin 4: A user's other sessions survive a change of their password
4.2
Moyenne
CVE-2026-116249
pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory
8.4
Élevée
CVE-2026-116250
pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check
6.5
Moyenne