CVE-2026-116238

Vendor

Pgadmin.Org

Product

pgAdmin 4

CVSS v3.1

8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-307, CWE-863

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 16
   CVE NVD 37h ago

   In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default).

   In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be bypassed, giving an unauthenticated attacker an unlimited number of password guesses against any…

   CVSS 8.1 CVE-2026-116238 Pgadmin.Org