CVE-2026-7815

A flaw was found in pgadmin4. Four user-supplied JSON fields bufferusagelimit, vacuumparallel, vacuumindexcleanup, reindextablespace were concatenated directly into the rendered VACUUM/ANALYZE/REINDEX command and passed to psql --command. An authenticated user with the toolsmaintenance permission...

CVE-2026-7815

creationtimestamp| type| source ---|---|--- 2026-05-11 16:59:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqoykwir2z 2026-05-26 15:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmrd4azuq726...