【Vulnerability Alert】High-Risk Security Vulnerability in pgAdmin 4 (CVE-2026-86863), Please Verify and Handle Promptly

• Subject:【Vulnerability Alert】High-Risk Security Vulnerability in pgAdmin 4 (CVE-2026-86863), Please Verify and Handle Promptly

• Description:
  • Forwarded NISAC Cybersecurity Message Alert NISAC-200-202610-00000006
  • Researchers have discovered an authentication bypass vulnerability (CVE-2026-86863) in pgAdmin 4. When the web server authentication source is enabled, an unauthenticated remote attacker may impersonate any user (including administrators) by sending a specially crafted HTTP request header, thereby obtaining pgAdmin administrative privileges. Please verify and handle promptly.
• Affected Platforms:
  • pgAdmin 4 versions 6.2 to 9.17
• Recommended Actions:
  • The vendor has released a patch or update for the vulnerability, please refer to the vendor's instructions for remediation; URL is as follows: https://github.com/pgadmin-org/pgadmin4/issues/10383
• References:
  1. https://nvd.nist.gov/vuln/detail/CVE-2026-86863
  2. https://github.com/pgadmin-org/pgadmin4/issues/10383

Computer and Communication Center
Network System Division