UpHeron
All vulnerabilities

Servers and applications

CVE-2025-9636

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.

Severity
High 7.9
Published
4 Sept 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
pgAdminServers and applications · cpe:a:pgadmin:pgadmin_4
  • Every version up to 9.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-9636
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-9636