P
Vendor security profile
pgadmin
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs22
Critical5
CISA KEV0
Public exploit2
Patch rate%82
Avg. CVSS7.9
12-month vulnerability rate
3
1
0
0
0
0
0
7
7
0
4
0
CVE KEV
CVE severity distribution
22toplam CVE
Critical5 (23%)
High10 (45%)
Medium7 (32%)
Patch and exploitation view
%82
Verified patch
%0
CISA KEV
%9
Public exploit
18Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
8.8
CVE-2026-86864
pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool
P
Patch verifiedEPSS %1
9.8
CVE-2026-86863
pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode
P
Patch verifiedEPSS %1
6.5
CVE-2026-86862
pgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance tools
P
Patch verifiedEPSS %0
5.9
CVE-2026-86861
pgAdmin 4: File Manager save_file writes through a symbolic link planted after the containment check
P
Patch verifiedEPSS %0
9.9
CVE-2026-17566
OS command injection in Pgadmin 4
P
Patch verifiedEPSS %1
9.0
CVE-2026-17351
SQL injection in Pgadmin 4
P
Patch verifiedEPSS %0
5.4
CVE-2026-17350
Missing authorization in Pgadmin 4
P
Patch verifiedEPSS %0
9.6
CVE-2026-17349
Insufficiently protected credentials in Pgadmin 4
P
Patch verifiedEPSS %0
6.5
CVE-2026-17348
Missing authentication in Pgadmin 4
P
Patch verifiedEPSS %0
8.8
CVE-2026-17347
OS command injection in Pgadmin 4
P
Patch verifiedEPSS %1