pgadmin.org vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 20258
3. 202642

Newest CVEs

• CVE-2026-116252

  pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name

  pgadmin.org · pgAdmin 4

  High7.1
• CVE-2026-116251

  pgAdmin 4: A user's other sessions survive a change of their password

  pgadmin.org · pgAdmin 4

  Low2.3
• CVE-2026-116250

  pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check

  pgadmin.org · pgAdmin 4

  High7.3
• CVE-2026-116249

  pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory

  pgadmin.org · pgAdmin 4

  High7.2
• CVE-2026-116248

  pgAdmin 4: Non-administrators can share a server with every user

  pgadmin.org · pgAdmin 4

  Medium6.0
• CVE-2026-116247

  pgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificate

  pgadmin.org · pgAdmin 4

  High7.1
• CVE-2026-116246

  pgAdmin 4: Server passwords are left in pgAdmin's process environment

  pgadmin.org · pgAdmin 4

  High7.0
• CVE-2026-116245

  pgAdmin 4: Connection services are not restricted in server mode

  pgadmin.org · pgAdmin 4

  High7.1
• CVE-2026-116244

  pgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials

  pgadmin.org · pgAdmin 4

  High7.1
• CVE-2026-116243

  pgAdmin 4: Utility binary path can point at a shared storage directory

  pgadmin.org · pgAdmin 4

  High7.7