CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-7814

Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules. User-controlled PostgreSQL object names (database, schema, table, column, etc.) were assigned to DOM elements via innerHTML, allowing crafted object names containing HTML markup to execute attacker-supplied JavaScript in the browser of any pgAdmin user who navigated to or executed EXPLAIN over the malicious object. Fix replaces innerHTML with textContent. This issue affects pgAdmin 4: before 9.15.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.7%

CVSS Severity

CVSS v3 Score 4.8

References

Products affected by CVE-2026-7814

Pgadmin » Pgadmin 4 » Version: 6.10

cpe:2.3:a:pgadmin:pgadmin_4:6.10
Pgadmin » Pgadmin 4 » Version: 6.11

cpe:2.3:a:pgadmin:pgadmin_4:6.11
Pgadmin » Pgadmin 4 » Version: 6.12

cpe:2.3:a:pgadmin:pgadmin_4:6.12
Pgadmin » Pgadmin 4 » Version: 6.13

cpe:2.3:a:pgadmin:pgadmin_4:6.13
Pgadmin » Pgadmin 4 » Version: 6.14

cpe:2.3:a:pgadmin:pgadmin_4:6.14
Pgadmin » Pgadmin 4 » Version: 6.15

cpe:2.3:a:pgadmin:pgadmin_4:6.15
Pgadmin » Pgadmin 4 » Version: 6.16

cpe:2.3:a:pgadmin:pgadmin_4:6.16
Pgadmin » Pgadmin 4 » Version: 6.17

cpe:2.3:a:pgadmin:pgadmin_4:6.17
Pgadmin » Pgadmin 4 » Version: 6.18

cpe:2.3:a:pgadmin:pgadmin_4:6.18
Pgadmin » Pgadmin 4 » Version: 6.19

cpe:2.3:a:pgadmin:pgadmin_4:6.19
Pgadmin » Pgadmin 4 » Version: 6.20

cpe:2.3:a:pgadmin:pgadmin_4:6.20
Pgadmin » Pgadmin 4 » Version: 6.21

cpe:2.3:a:pgadmin:pgadmin_4:6.21
Pgadmin » Pgadmin 4 » Version: 6.9

cpe:2.3:a:pgadmin:pgadmin_4:6.9
Pgadmin » Pgadmin 4 » Version: 7.0

cpe:2.3:a:pgadmin:pgadmin_4:7.0
Pgadmin » Pgadmin 4 » Version: 7.1

cpe:2.3:a:pgadmin:pgadmin_4:7.1
Pgadmin » Pgadmin 4 » Version: 7.2

cpe:2.3:a:pgadmin:pgadmin_4:7.2
Pgadmin » Pgadmin 4 » Version: 7.3

cpe:2.3:a:pgadmin:pgadmin_4:7.3
Pgadmin » Pgadmin 4 » Version: 7.4

cpe:2.3:a:pgadmin:pgadmin_4:7.4
Pgadmin » Pgadmin 4 » Version: 7.5

cpe:2.3:a:pgadmin:pgadmin_4:7.5
Pgadmin » Pgadmin 4 » Version: 7.6

cpe:2.3:a:pgadmin:pgadmin_4:7.6
Pgadmin » Pgadmin 4 » Version: 7.7

cpe:2.3:a:pgadmin:pgadmin_4:7.7
Pgadmin » Pgadmin 4 » Version: 7.8

cpe:2.3:a:pgadmin:pgadmin_4:7.8
Pgadmin » Pgadmin 4 » Version: 8.0

cpe:2.3:a:pgadmin:pgadmin_4:8.0
Pgadmin » Pgadmin 4 » Version: 8.1

cpe:2.3:a:pgadmin:pgadmin_4:8.1
Pgadmin » Pgadmin 4 » Version: 8.10

cpe:2.3:a:pgadmin:pgadmin_4:8.10
Pgadmin » Pgadmin 4 » Version: 8.11

cpe:2.3:a:pgadmin:pgadmin_4:8.11
Pgadmin » Pgadmin 4 » Version: 8.12

cpe:2.3:a:pgadmin:pgadmin_4:8.12
Pgadmin » Pgadmin 4 » Version: 8.13

cpe:2.3:a:pgadmin:pgadmin_4:8.13
Pgadmin » Pgadmin 4 » Version: 8.14

cpe:2.3:a:pgadmin:pgadmin_4:8.14
Pgadmin » Pgadmin 4 » Version: 8.2

cpe:2.3:a:pgadmin:pgadmin_4:8.2
Pgadmin » Pgadmin 4 » Version: 8.3

cpe:2.3:a:pgadmin:pgadmin_4:8.3
Pgadmin » Pgadmin 4 » Version: 8.4

cpe:2.3:a:pgadmin:pgadmin_4:8.4
Pgadmin » Pgadmin 4 » Version: 8.5

cpe:2.3:a:pgadmin:pgadmin_4:8.5
Pgadmin » Pgadmin 4 » Version: 8.6

cpe:2.3:a:pgadmin:pgadmin_4:8.6
Pgadmin » Pgadmin 4 » Version: 8.7

cpe:2.3:a:pgadmin:pgadmin_4:8.7
Pgadmin » Pgadmin 4 » Version: 8.8

cpe:2.3:a:pgadmin:pgadmin_4:8.8
Pgadmin » Pgadmin 4 » Version: 8.9

cpe:2.3:a:pgadmin:pgadmin_4:8.9
Pgadmin » Pgadmin 4 » Version: 9.0

cpe:2.3:a:pgadmin:pgadmin_4:9.0
Pgadmin » Pgadmin 4 » Version: 9.1

cpe:2.3:a:pgadmin:pgadmin_4:9.1
Pgadmin » Pgadmin 4 » Version: 9.10

cpe:2.3:a:pgadmin:pgadmin_4:9.10
Pgadmin » Pgadmin 4 » Version: 9.2

cpe:2.3:a:pgadmin:pgadmin_4:9.2
Pgadmin » Pgadmin 4 » Version: 9.3

cpe:2.3:a:pgadmin:pgadmin_4:9.3
Pgadmin » Pgadmin 4 » Version: 9.4

cpe:2.3:a:pgadmin:pgadmin_4:9.4
Pgadmin » Pgadmin 4 » Version: 9.5

cpe:2.3:a:pgadmin:pgadmin_4:9.5
Pgadmin » Pgadmin 4 » Version: 9.6

cpe:2.3:a:pgadmin:pgadmin_4:9.6
Pgadmin » Pgadmin 4 » Version: 9.7

cpe:2.3:a:pgadmin:pgadmin_4:9.7
Pgadmin » Pgadmin 4 » Version: 9.8

cpe:2.3:a:pgadmin:pgadmin_4:9.8
Pgadmin » Pgadmin 4 » Version: 9.9

cpe:2.3:a:pgadmin:pgadmin_4:9.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-7814

Products

Pricing

Contact Us