#pgadmin
LightNews LightNews
thehackerwire.bsky.social
🟠 CVE-2026-116244 - High (8.2)

When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin...

https://www.thehackerwire.com/vulnerability/CVE-2026-116244/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-116244 - High
November 1, 2026 at 3:02 AM
donwebmedia.bsky.social
Seguridad pgAdmin: lo que ZoomEye no te dice

¿47.757 páginas con pgAdmin en ZoomEye son un riesgo real? La seguridad pgAdmin depende del modo servidor y del proxy, no del título de la página

#pgadmin #postgresql #seguridadpgadmin #reverseproxy #hostheaderinjection
Seguridad pgAdmin: lo que ZoomEye no te dice
47.757 páginas con pgAdmin aparecen en ZoomEye, pero la seguridad pgAdmin real depende del modo servidor, el proxy y los controles de login, no del título.
donweb.news
October 31, 2026 at 1:49 AM
postgresql.org
News: pgAdmin 4 v9.19 Released

https://www.postgresql.org/about/news/pgadmin-4-v919-released-3426/

#postgresql
October 31, 2026 at 2:15 AM
edgarjmb.bsky.social
pgAdmin 4 v9.19: una actualización que los administradores de PostgreSQL deben revisar
lnkd.in/p/dWGEFMpt
pgAdmin 4 v9.19: una actualización que los administradores de PostgreSQL deben revisar pgAdmin es una herramienta habitual para administrar, desarrollar y monitorizar entornos PostgreSQL. Su versión…...
pgAdmin 4 v9.19: una actualización que los administradores de PostgreSQL deben revisar pgAdmin es una herramienta habitual para administrar, desarrollar y monitorizar entornos PostgreSQL. Su versión ...
lnkd.in
October 31, 2026 at 2:50 PM
donwebmedia.bsky.social
Seguridad pgAdmin: lo que ZoomEye no te dice

¿47.757 páginas con pgAdmin en ZoomEye son un riesgo real? La seguridad pgAdmin depende del modo servidor y del proxy, no del título de la página

#pgadmin #postgresql #seguridadpgadmin #reverseproxy #hostheaderinjection
Seguridad pgAdmin: lo que ZoomEye no te dice
47.757 páginas con pgAdmin aparecen en ZoomEye, pero la seguridad pgAdmin real depende del modo servidor, el proxy y los controles de login, no del título.
donweb.news
October 31, 2026 at 1:49 AM
neonotu.bsky.social
🟠 HOCH · pgAdmin: mehrere Schwachstellen

CERT-Bund (BSI)
pgAdmin: mehrere Schwachstellen
CERT-Bund (BSI) meldet mehrere Schwachstellen in pgAdmin mit dem Schweregrad hoch. Die vollständige Beschreibung mit betroffenen Versionen und empfohlenen Maßnahmen steht beim CERT-Bund (BSI).
alerts.neonotu.com
October 30, 2026 at 8:08 PM
stackflag.bsky.social
CVE-2026-116241 - pgadmin 4
The Export tool in pgAdmin 4 versions before 9.19 can be tricked into executing a system command on the computer where pgAdmin is running. This happens when a crafted query…

Too many irrelevant or confusing CVEs? Use stackflag.com

#pgadmin4 #pgadminorg #CVE #infosec
CVE-2026-116241: pgAdmin 4 allows data export to run commands on the server host
The Export tool in pgAdmin 4 versions before 9.19 can be tricked into executing a system command on the computer where pgAdmin is running.
stackflag.com
October 30, 2026 at 10:00 PM
🐧 **PostgreSQL: pgAdmin 4 v9.1, E-Maj 5.0.1, and LLM Slop Delays Release**

Database updates

📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/10/31/PostgreSQL_pgAdmin_4_v9_1_E_Maj_5_0_1_and_LLM_Slop_Delays_Relea.shtml
PostgreSQL: pgAdmin 4 v9.1, E-Maj 5.0.1, and LLM Slop Delays Release
Database updates
tuxmachines.org
November 2, 2026 at 7:23 PM
kitafox.bsky.social
pgAdmin 4にクリティカル脆弱性2件 #Security NEXT (Nov 2)

www.security-next.com/192279
【セキュリティ ニュース】DB管理ツール「pgAdmin 4」に複数脆弱性 - 2件は「クリティカル」（1ページ目 / 全2ページ）：Security NEXT
「PostgreSQL」向けのデータベース管理ツール「pgAdmin 4」に複数の脆弱性が判明した。修正版を提供しており、利用者にアップデートを呼びかけている。 ：Security NEXT
www.security-next.com
November 4, 2026 at 1:11 AM
thestacksentinel.com
⚠️ pgAdmin 4 9.19: Fixes 15 CVEs, Including OS Command Injection

The pgAdmin 4 v9.19 announcement lists fixes for 15 security vulnerabilities, CVE-2026-116238 through CVE-2026-116252.

Inside:
• Login lockout and account selection in server mode

Full breakdown, every claim linked to its source 👇
pgAdmin 4 9.19: Fixes 15 CVEs, Including OS Command Injection
pgAdmin 4 9.19 fixes 15 CVEs, including OS command injection. Configure SERVER_PASSEXEC_COMMANDS before the first start after upgrading.
thestacksentinel.com
October 31, 2026 at 12:02 PM
securityonline.bsky.social
The PostgreSQL project resolved 15 critical pgAdmin 4 vulnerabilities in version 9.19, fixing command injection flaw CVE-2026-116241 and credential leaks.

#pgAdmin4 #PostgreSQL #DatabaseSecurity #CVE2026116241 #RCE #Cybersecurity #Vulnerability #InfoSec
15 Critical pgAdmin 4 Vulnerabilities Fixed in Version 9.19
TL;DR The PostgreSQL development team released pgAdmin 4 version 9.19 on October 29, 2026. This update remediates 15 critical pgAdmin 4 vulnerabilities. These flaws expose systems to remote code execution and credential theft. Therefore, database administrators must upgrade their server and desktop deployments immediately. Why It Matters pgAdmin is the most popular open-source administration platform for PostgreSQL. The software serves millions of developers and enterprise administrators worldwide.
securityonline.info
November 2, 2026 at 1:05 AM
news.tuxmachines.org.web.brid.gy
PostgreSQL: pgAdmin 4 v9.1, E-Maj 5.0.1, and LLM Slop Delays Release
Database updates
tuxmachines.org
October 31, 2026 at 8:50 PM
thehackerwire.bsky.social
🟠 CVE-2026-116242 - High (8.2)

pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories ...

https://www.thehackerwire.com/vulnerability/CVE-2026-116242/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-116242 - High
November 1, 2026 at 8:33 AM
🐧 **PostgreSQL: pgAdmin 4 v9.1, E-Maj 5.0.1, and LLM Slop Delays Release**

Database updates

📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/10/31/PostgreSQL_pgAdmin_4_v9_1_E_Maj_5_0_1_and_LLM_Slop_Delays_Relea.shtml
Tux Machines — PostgreSQL: pgAdmin 4 v9.1, E-Maj 5.0.1, and LLM Slop Delays Release
news.tuxmachines.org
October 31, 2026 at 7:02 PM
sleepydogtsjp.bsky.social
DB管理ツール「pgAdmin 4」に複数脆弱性 - 2件は「クリティカル」：Security NEXT
www.security-next.com/192279
【セキュリティ ニュース】DB管理ツール「pgAdmin 4」に複数脆弱性 - 2件は「クリティカル」（1ページ目 / 全2ページ）：Security NEXT
「PostgreSQL」向けのデータベース管理ツール「pgAdmin 4」に複数の脆弱性が判明した。修正版を提供しており、利用者にアップデートを呼びかけている。 ：Security NEXT
www.security-next.com
November 3, 2026 at 3:57 AM
thehackerwire.bsky.social
🔴 CVE-2026-116241 - Critical (9.9)

pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command ...

https://www.thehackerwire.com/vulnerability/CVE-2026-116241/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-116241 - Critical
November 1, 2026 at 8:33 AM
stackflag.bsky.social
CVE-2026-116238 - pgadmin 4
In pgAdmin 4's server mode, the built‑in limit that should lock an account after three failed logins can be avoided, letting anyone keep trying passwords on any internal user,…

Too many irrelevant or confusing CVEs? Use stackflag.com

#pgadmin4 #pgadminorg #CVE #infosec
CVE-2026-116238: pgAdmin 4 allows unlimited password guesses on internal accounts
In pgAdmin 4's server mode, the built‑in limit that should lock an account after three failed logins can be avoided, letting anyone keep trying passwords.
stackflag.com
October 30, 2026 at 9:50 PM
thehackerwire.bsky.social
🟠 CVE-2026-116249 - High (8.4)

In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tun...

https://www.thehackerwire.com/vulnerability/CVE-2026-116249/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
November 1, 2026 at 1:01 AM
thehackerwire.bsky.social
🟠 CVE-2026-116243 - High (7.5)

pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their...

https://www.thehackerwire.com/vulnerability/CVE-2026-116243/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-116243 - High
November 1, 2026 at 3:02 AM
thehackerwire.bsky.social
🟠 CVE-2026-116238 - High (8.1)

In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by d...

https://www.thehackerwire.com/vulnerability/CVE-2026-116238/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-116238 - High
November 1, 2026 at 8:33 AM
thehackerwire.bsky.social
🟠 CVE-2026-116239 - High (8.5)

In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exi...

https://www.thehackerwire.com/vulnerability/CVE-2026-116239/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-116239 - High
November 1, 2026 at 7:47 AM
thehackerwire.bsky.social
🟠 CVE-2026-116247 - High (8.2)

When a server in pgAdmin 4 had no password file, client certificate or client key configured, or ...

https://www.thehackerwire.com/vulnerability/CVE-2026-116247/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-116247 - High
November 1, 2026 at 7:47 AM
sec-news-bot.bsky.social
DB管理ツール「pgAdmin 4」に複数脆弱性 - 2件は「クリティカル」

PostgreSQL向けのデータベース管理ツール「pgAdmin 4」で複数の脆弱性が判明し、うち2件がクリティカルレベルとされている。開発チームは修正版を提供しており、ユーザーに対してアップデートを推奨している。

#脆弱性 #情報セキュリティ
DB管理ツール「pgAdmin 4」に複数脆弱性 - 2件は「クリティカル」
PostgreSQL向けのデータベース管理ツール「pgAdmin 4」で複数の脆弱性が判明し、うち2件がクリティカルレベルとされている。開発チームは修正版を提供しており、ユーザーに対してアップデートを推奨している。
www.security-next.com
November 2, 2026 at 4:01 AM
4sterisk.mi.tomadoi.com.ap.brid.gy
【セキュリティ ニュース】DB管理ツール「pgAdmin 4」に複数脆弱性 - 2件は「クリティカル」（1ページ目 / 全2ページ）：Security NEXT https://www.security-next.com/192279
【セキュリティ ニュース】DB管理ツール「pgAdmin 4」に複数脆弱性 - 2件は「クリティカル」（1ページ目 / 全2ページ）：Security NEXT
「PostgreSQL」向けのデータベース管理ツール「pgAdmin 4」に複数の脆弱性が判明した。修正版を提供しており、利用者にアップデートを呼びかけている。 ：Security NEXT
www.security-next.com
November 2, 2026 at 11:26 AM
shiojiri.com
Version 9.19 — pgAdmin 4 9.19 documentation https://www.pgadmin.org/docs/pgadmin4/latest/release_notes_9_19.html
October 30, 2026 at 12:07 AM