CVE-2026-86863

CVE-2026-86863 (CVSS 9.8): pgAdmin 4 Authentication Bypass Flaw Diagram showing the critical pgAdmin 4 authentication bypass vulnerability

CVE-2026-86863 (CVSS 9.8): pgAdmin 4 Authentication Bypass Flaw

Do Son September 18, 2026

TL;DR A flaw in pgAdmin 4 allows remote actors to bypass authentication when Webserver mode is active....

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-76460CVSS 10.0
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-89026CVSS 9.8
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT...
Admin intel📅 Updated: Sep 16, 2026
CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87886
Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-87827CVSS 10.0
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-78006CVSS 9.8
The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to,...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-39364
Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-27540CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture...
Admin intel📅 Updated: Sep 15, 2026

CVE-2026-67100CVSS 9.8
HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which...
📅 Updated: Sep 18, 2026
CVE-2026-67101CVSS 9.3
HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which...
📅 Updated: Sep 18, 2026
CVE-2026-20341CVSS 9.1
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenticated, remote...
📅 Updated: Sep 18, 2026
CVE-2026-20242CVSS 9.8
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow...
📅 Updated: Sep 18, 2026
CVE-2026-20237CVSS 9.1
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE)...
📅 Updated: Sep 18, 2026
CVE-2026-20130CVSS 10.0
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE)...
📅 Updated: Sep 18, 2026
CVE-2026-20192CVSS 10.0
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE)...
📅 Updated: Sep 18, 2026
CVE-2026-20324CVSS 9.9
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow...
📅 Updated: Sep 18, 2026

Critical Alert 3 Active Exploits Detected Today

CVE-2026-86863 (CVSS 9.8): pgAdmin 4 Authentication Bypass Flaw