VIR Vulnerability Intelligence Relay

CVE-2026-7816

high
Published 2026-05-11 · Modified 2026-05-18
CVSS v3
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2
—
VIR risk
8.8

Description

pgAdmin 4: OS command injection vulnerability in Import/Export query export

Predictions

Exploit likelihood
92%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2026-7816.html

vendor Authored 2026-05-27

Vendor advisory: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007 — https://github.com/pgadmin-org/pgadmin4/issues/9899

OS impact
OSVersionStatusFixed in
suse slesaffected

Package impact
EcosystemPackageVulnerableFixed
python PyPIpgadmin4<9.159.15
PIPpgadmin4< 9.159.15

Application impact
VendorProductVersionsFixed
pgadminpgadmin_4{"startIncluding":"9.4","endExcluding":"9.15"}9.15

References

CWEs

CWE-78

Verify integrity in audit chain (admin only). AS-IS.