CVE-2026-7814 - pgAdmin 4: Stored XSS via crafted PostgreSQL object names in Browser Tree and Explain Visualizer
CVE ID :CVE-2026-7814 Published : May 11, 2026, 4:17 p.m. | 48 minutes ago Description :Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules. User-controlled PostgreSQL object names (database, schema, table, column, etc.) were assigned to DO
ORIGINAL SOURCE →via CVE Feed Latest
ADVERTISEMENT
⚡ STAY AHEAD
Events like this, convergence-verified across 689 sources, land in your inbox every Sunday. Free.
GET THE SUNDAY BRIEFING →RELATED · cyber
- [CYBER] LayerZero apologizes for response to major DeFi hack - The Logic
- [CYBER] FROM TOR TO TRACEABLE: WHY 90% OF 'ANONYMOUS' Threat actors ARE ONE MISTAKE AWAY FROM EXPOSURE
- [CYBER] Kia’s cyber-inspired electric sports car is ‘90% production-ready’
- [CYBER] Google Says Hackers Used AI To Create Zero Day Security Flaw For the First Time
- [CYBER] Foxconn Wisconsin breach reportedly linked to Nitrogen ransomware, 8TB data theft claim
- [CYBER] Vibe Coding is Fun Until You Hit Production