CVE-2025-9636

High CVSS: 7.9

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.

Vendor

Pgadmin

Product

Pgadmin 4

CWE

CWE-346

Yayın Tarihi

2025-09-04 17:15:39

Güncelleme

2025-09-11 21:26:47

Source Identifier

f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

KEV Date Added

Kategoriler

CWE-346 Pgadmin 4 HIGH Pgadmin 2025

Referanslar

https://github.com/pgadmin-org/pgadmin4/issues/9114

Benzer Kayıtlar

High

CVE-2026-1707

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when run…

Critical

CVE-2025-13780

pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in serv…

High

CVE-2025-12765

pgAdmin

Critical

CVE-2025-12762

pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in serve…

Medium

CVE-2025-12763

pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused…

High

CVE-2025-12764

pgAdmin