Security Operations
Threat Intelligence
🔎
❓

Vulnerability Intelligence

Correlated vulnerability reporting from CISA, NVD/NIST, NCSCs, MSRC and vendor advisories. Search a vendor or product - e.g. "Microsoft Exchange".
DEMO MODE
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-116250 CVE-2026-116250 - In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permissio MEDIUM 6.5 linux Unknown 1 Details
CVE-2026-116249 CVE-2026-116249 - In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relat HIGH 8.4 Unknown 1 Details
CVE-2026-116248 CVE-2026-116248 - In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Sha MEDIUM 6.8 Unknown 1 Details
CVE-2026-116247 CVE-2026-116247 - When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one coul HIGH 8.2 Unknown 1 Details
CVE-2026-116246 CVE-2026-116246 - To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrot MEDIUM 6.5 Unknown 1 Details
CVE-2026-116245 CVE-2026-116245 - libpq looks a connection service up in the service file of the operating-system account running pgAdmin 4, and an entry HIGH 8.2 Unknown 1 Details
CVE-2026-116244 CVE-2026-116244 - When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME fro HIGH 8.2 sap Unknown 1 Details
CVE-2026-116243 CVE-2026-116243 - pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binary path a user sets in their preferences. In server HIGH 7.5 Unknown 1 Details
CVE-2026-116242 CVE-2026-116242 - pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so HIGH 8.2 Unknown 1 Details
CVE-2026-116241 CVE-2026-116241 - pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the que CRITICAL 9.9 Unknown 1 Details
CVE-2026-116240 CVE-2026-116240 - In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds MEDIUM 6.5 google Unknown 1 Details
CVE-2026-116239 CVE-2026-116239 - In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an HIGH 8.5 Unknown 1 Details
CVE-2026-116238 CVE-2026-116238 - In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit coul HIGH 8.1 Unknown 1 Details
CVE-2026-115830 CVE-2026-115830 - In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and receive INFORMATIONAL - Unknown 1 Details
CVE-2026-115829 CVE-2026-115829 - In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step and authenticate by successful INFORMATIONAL - Unknown 1 Details
CVE-2026-115828 CVE-2026-115828 - In Secret Server versions earlier than 12.3.1, Secret Server did not always validate the PIN or biometric check when usi INFORMATIONAL - Unknown 1 Details
CVE-2026-119339 CVE-2026-119339 - tesseract: Tesseract: Denial of service via crafted trained model file MEDIUM 5.5 Red Hat Unknown 2 sources Details
CVE-2026-119338 CVE-2026-119338 - tesseract: tesseract: Denial of Service via crafted right-to-left text rendering MEDIUM 6.6 Red Hat Unknown 2 sources Details
CVE-2026-94175 CVE-2026-94175 - Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions. HIGH 7.1 Unknown 1 Details
CVE-2026-90888 CVE-2026-90888 - Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions. CRITICAL 9.8 Unknown 1 Details