Back Linuxsecurity

Fedora 43 pgAdmin 9.18 Security Enhancement for CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 27, 2026

Share: View original

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

pgAdmin is the most popular and feature rich Open Source administration and development

platform for PostgreSQL, the most advanced Open Source database in the world.

Update to pgadmin-9.18.

* Thu Sep 17 2026 Sandro Mani - 9.18-1 - Update to 9.18 * Thu Sep 3 2026 Sandro Mani - 9.17-2 - Add patch to fix compatibility with pgadmin3 (#2527807)

[ 1 ] Bug #2536104 - pgadmin4-9.18 is available [ 2 ] Bug #2536446 - CVE-2026-86862 pgadmin4: connection-string injection via the database field in the Restore and Maintenance tools [fedora-all] [ 3 ] Bug #2536448 - CVE-2026-86863 pgadmin4: authentication bypass via a client-controlled identity header in Webserver authentication mode [fedora-all] [ 4 ] Bug #2536449 - CVE-2026-86864 pgadmin4: argument and connection-string injection via the database field in the Backup tool [fedora-all] [ 5 ] Bug #2536814 - CVE-2026-86861 pgadmin4: pgAdmin 4: Arbitrary file write via symbolic link following in File Manager [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-dddd2792e3' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Security Flaws in pgAdmin 4 Affecting Fedora Users Multiple vulnerabilities in pgAdmin 4, including CVE-2026-86862, CVE-2026-86863, CVE-2026-86864, and CVE-2026-86861, were disclosed on September 17, 2026. These flaws allow for connection-string injection, authentication bypass, and arbitrary file write, posing significant risks to users of Fedora systems. The vulnerabilities affect pgAdmin versions 9.18 and earlier. CISA has confirmed exploitation of a Linux firewall flaw, urging users to check for necessary fixes. Administrators are advised to update to pgAdmin 9.18 to mitigate these risks. The updates can be installed using the 'dnf' package manager. The vulnerabilities are critical and have been assigned a high severity rating due to their potential impact on database security. 3 sources 73

Extracted Entities

Fedora 43 pgAdmin 9.18 Security Enhancement for CVE-2026

The full story

Extracted Entities

Attack Types (1)

CVEs (4)

CWE Weaknesses (2)

Platforms (1)