| CVE-2026-17346 |
The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON / pgstattuple /…
|
8.8
Élevée
|
31 juil. 2026 |
| CVE-2026-12049 |
Open redirect in pgAdmin 4's multi-factor authentication flow
|
4.3
Moyenne
|
18 juin 2026 |
| CVE-2026-12048 |
Stored cross-site scripting in pgAdmin 4's error-rendering and plan-node-rendering paths
|
9.3
Critique
|
18 juin 2026 |
| CVE-2026-12047 |
HTML injection in pgAdmin 4's cloud deployment module
|
3.5
Faible
|
18 juin 2026 |
| CVE-2026-12046 |
Two state-mutating endpoints in pgAdmin 4's SQL Editor blueprint -- DELETE /sqleditor/close/ and POST…
|
9.0
Critique
|
18 juin 2026 |
| CVE-2026-12045 |
Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can influence database content that…
|
9.0
Critique
|
18 juin 2026 |
| CVE-2026-12050 |
SQL injection in pgAdmin 4's named restore point endpoint (POST /browser/server/restore_point/{gid}/{sid})
|
4.3
Moyenne
|
18 juin 2026 |
| CVE-2026-12044 |
SQL injection in pgAdmin 4 across every dialog template that renders ``COMMENT ON
|
8.8
Élevée
|
18 juin 2026 |
| CVE-2026-7820 |
Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4
|
6.5
Moyenne
|
11 mai 2026 |
| CVE-2026-7818 |
Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager
|
7.0
Élevée
|
11 mai 2026 |
| CVE-2026-7819 |
Symbolic-link path traversal (CWE-61, CWE-22) in pgAdmin 4 File Manager
|
8.1
Élevée
|
11 mai 2026 |
| CVE-2026-7817 |
Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration…
|
6.5
Moyenne
|
11 mai 2026 |
| CVE-2026-7815 |
SQL injection vulnerability in pgAdmin 4 Maintenance Tool
|
8.8
Élevée
|
11 mai 2026 |
| CVE-2026-7816 |
OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export
|
8.8
Élevée
|
11 mai 2026 |
| CVE-2026-7814 |
Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules
|
4.8
Moyenne
|
11 mai 2026 |
| CVE-2026-7813 |
Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background…
|
9.9
Critique
|
11 mai 2026 |
| CVE-2026-1707 |
pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when…
|
7.4
Élevée
|
5 févr. 2026 |
| CVE-2025-13780 |
Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4)
|
9.1
Critique
|
11 déc. 2025 |
| CVE-2025-12765 |
pgAdmin…
|
7.5
Élevée
|
13 nov. 2025 |
| CVE-2025-12764 |
pgAdmin…
|
7.5
Élevée
|
13 nov. 2025 |
| CVE-2025-12763 |
pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems
|
6.8
Moyenne
|
13 nov. 2025 |
| CVE-2025-12762 |
pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in…
|
9.1
Critique
|
13 nov. 2025 |
| CVE-2025-9636 |
pgAdmin…
|
7.9
Élevée
|
4 sept. 2025 |
| CVE-2025-2946 |
pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS)
|
9.1
Critique
|
3 avr. 2025 |
| CVE-2025-2945 |
Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules)
|
9.9
Critique
|
3 avr. 2025 |