VIR Vulnerability Intelligence Relay

CVE-2026-7813

critical
Published 2026-05-11 · Modified 2026-05-18
CVSS v3
9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v2
—
VIR risk
9.9

Description

pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules

Predictions

Exploit likelihood
98%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2026-7813.html

vendor Authored 2026-05-27

Vendor advisory: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 — https://github.com/pgadmin-org/pgadmin4/pull/9835

vendor Authored 2026-05-27

Vendor advisory: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 — https://github.com/pgadmin-org/pgadmin4/pull/9830

OS impact
OSVersionStatusFixed in
suse slesaffected

Package impact
EcosystemPackageVulnerableFixed
python PyPIpgadmin4<9.159.15
PIPpgadmin4< 9.159.15

Application impact
VendorProductVersionsFixed
pgadminpgadmin_4{"endExcluding":"9.15"}9.15

References

CWEs

CWE-284

Verify integrity in audit chain (admin only). AS-IS.