https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:50:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-02533 bdu:2026-02533 https://cve.radiocsirt.org/vuln/bdu:2026-02533 https://cve.radiocsirt.org/vuln/euvd-2026-273612 EUVD-2026-273612 https://cve.radiocsirt.org/vuln/euvd-2026-273612 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1707 <p>pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract the `\restrict` key in real time, and race the restore process by overwriting the restore script with a payload that re-enables meta-commands using `\unrestrict &lt;key&gt;`. This results in reliable command execution on the pgAdmin host during the restore operation.</p> <p>pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract the `\restrict` key in real time, and race the restore process by overwriting the restore script with a payload that re-enables meta-commands using `\unrestrict &lt;key&gt;`. This results in reliable command execution on the pgAdmin host during the restore operation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-1707 https://cve.radiocsirt.org/vuln/ghsa-3p7x-94q9-jq9x <p><strong>Affected:</strong> PyPI: pgadmin4</p> <p>pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract the `\restrict` key in real time, and race the restore process by overwriting the restore script with a payload that re-enables meta-commands using `\unrestrict &lt;key&gt;`. This results in reliable command execution on the pgAdmin host during the restore operation.</p> <p><strong>Affected:</strong> PyPI: pgadmin4</p> <p>pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract the `\restrict` key in real time, and race the restore process by overwriting the restore script with a payload that re-enables meta-commands using `\unrestrict &lt;key&gt;`. This results in reliable command execution on the pgAdmin host during the restore operation.</p> https://cve.radiocsirt.org/vuln/ghsa-3p7x-94q9-jq9x https://cve.radiocsirt.org/vuln/opensuse-su-2026:11508-1 <p>pgadmin4-9.17-1.1 on GA media</p> <p>pgadmin4-9.17-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11508-1 https://cve.radiocsirt.org/vuln/pysec-2026-2864 <p><strong>Affected:</strong> PyPI: pgadmin4</p> <p>pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract the `\restrict` key in real time, and race the restore process by overwriting the restore script with a payload that re-enables meta-commands using `\unrestrict &lt;key&gt;`. This results in reliable command execution on the pgAdmin host during the restore operation.</p> <p><strong>Affected:</strong> PyPI: pgadmin4</p> <p>pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. An attacker with access to the pgAdmin web interface can observe an active restore operation, extract the `\restrict` key in real time, and race the restore process by overwriting the restore script with a payload that re-enables meta-commands using `\unrestrict &lt;key&gt;`. This results in reliable command execution on the pgAdmin host during the restore operation.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2864 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0323 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in pgAdmin ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in pgAdmin ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0323