Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-9636

pgAdmin <= 9.7 is affected by a Cross-Origin Opener Policy (COOP) vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation.

Published

2025-09-04T17:15:39.670

Last Modified

2025-09-11T21:26:47.250

Status

Analyzed

Source

f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

Severity

CVSSv3.1: 7.9 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-346
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application pgadmin pgadmin_4 ≤ 9.7 Yes
References