P
Vendor security profile
pgadmin.org
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical1
CISA KEV0
Public exploit2
Patch rate%100
Avg. CVSS7.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
4
0
CVE KEV
CVE severity distribution
4toplam CVE
Critical1 (25%)
High1 (25%)
Medium2 (50%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%50
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
8.8
CVE-2026-86864
pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool
P
Patch verifiedEPSS %1
9.8
CVE-2026-86863
pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode
P
Patch verifiedEPSS %1
6.5
CVE-2026-86862
pgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance tools
P
Patch verifiedEPSS %0
5.9
CVE-2026-86861
pgAdmin 4: File Manager save_file writes through a symbolic link planted after the containment check
P
Patch verifiedEPSS %0