Skip to content

CVE record · 1 source

CVE-2026-116249

CVSS 8.4

In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage…

Vendor: Pgadmin.Org
Product: pgAdmin 4
CVSS v3.1: 8.4 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Weakness: CWE-22, CWE-73

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

16

CVE NVD 37h ago

In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage…

In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage directory, but get_complete_file_path() only stripped leading slashes before…

CVSS 8.4 CVE-2026-116249 Pgadmin.Org