Login Request a demo
P4
Product
pgAdmin 4
by pgadmin.org · last CVE Sep 17, 2026
27
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 6High 10Medium 11Low 0
Severity
All severities27Critical6High10Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add pgAdmin 4 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-17566
9.9
1%
Jul 31
pgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)
Affected: before 9.18
CVE-2026-7813
9.9
0%
May 11
pgAdmin 4: Cross-user data access and shared-server privilege escalation in server mode
Affected: before 9.15
CVE-2026-86863
9.8
1%
Sep 17
pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode
Affected: 6.2 before 9.18
CVE-2026-17349
9.6
0%
Jul 31
pgAdmin 4: Adhoc server clone leaks another user's stored database credentials and ownership to a non-owner
Affected: 9.0 before 9.17
CVE-2026-17351
9.0
0%
Jul 31
pgAdmin 4: AI Assistant read-only transaction bypass via sqlparse/PostgreSQL lexer disagreement (incomplete fix for CVE-2026-12045)
Affected: 9.13 before 9.17
CVE-2026-12046
9.0
1%
Jun 18
pgAdmin 4: Unauthenticated pickle deserialization in SQL Editor close / update_connection routes enables remote code execution
Affected: 6.9 before 9.16
Showing 6