Warning: Critical authentication bypass vulnerability in pgAdmin 4, platform for PostgreSQL databases, Patch immediately!
ID: 7240668b-a2ee-53df-a07a-90ad6a1fe350
STIX ID: report--7240668b-a2ee-53df-a07a-90ad6a1fe350
Threat Score
**CVE-2026-86863 — pgAdmin 4 authentication bypass (CVSS 9.8):** A critical vulnerability affecting pgAdmin 4 (>=6.2, <9.18) allows an unauthenticated attacker to bypass authentication by spoofing HTTP identity headers when the 'webserver' authentication source is enabled, enabling impersonation of any user (including administrators) and potential full compromise of the pgAdmin interface; vendors recommend urgent patching and enhanced monitoring.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.