PT-2026-66777 · Pgadmin 4+2 · Pgadmin 4+2

Arpit Jain

·

CVE-2026-17566

·

Published

2026-07-27

·

Updated

2026-09-01

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to 9.17-1.1
Description The Import/Export Data functionality fails to properly neutralize special elements, which allows a remote attacker to execute arbitrary operating system commands on the server.
Recommendations Update to version 9.17-1.1.

Exploit

Fix

RCE

DoS

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-78CWE-115

Related Identifiers

BDU:2026-11412
CVE-2026-17566
OPENSUSE-SU-2026:11508-1

Affected Products

Pgadmin
Red Os
Pgadmin 4