【Vulnerability Alert】pgAdmin 4 Contains a High-Risk Security Vulnerability (CVE-2026-17566). Please Confirm and Apply Patches as Soon as Possible
Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2026081003084646 | Publication Time | 2026-08-10 15:15:46 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-08-10 15:15:46 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】pgAdmin 4 Contains a High-Risk Security Vulnerability (CVE-2026-17566). Please Confirm and Apply Patches as Soon as Possible |
|||
| [Content]
Forwarded from the National Institute of Cyber Security Cybersecurity Alert NISAC-200-202608-00000003 Researchers discovered that pgAdmin 4 contains a high-risk OS Command Injection security vulnerability (CVE-2026-17566). Because the Import/Export Data tool in pgAdmin 4 does not properly handle SQL queries, an authenticated remote attacker may exploit this vulnerability to execute arbitrary code. Please confirm and apply patches as soon as possible. Information Sharing Level: WHITE (the intelligence content is information that may be publicly disclosed) |
|||
| [Affected Platform]
pgAdmin 4 versions 1.0 to 9.16 |
|||
|
[Recommended Actions] The official vendor has released a remediation update for the vulnerability. Please refer to the official instructions for updating. The URL is as follows: https://www.postgresql.org/about/news/pgadmin-4-v917-released-3356/ |
|||
|
[Reference] 1. https://nvd.nist.gov/vuln/detail/cve-2026-17566 |
|||
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw