{"vulnerability": "CVE-2026-17566", "sightings": [{"uuid": "71396275-7bc1-4e28-b3c3-b46fefd879ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrzqjkiggq2a", "content": "CVE-2026-17566 - Critical RCE in pgAdmin 4. Import/Export Data tool allows command injection via crafted SQL. CVSS 9.9. Unpatched - restrict access immediately. #CVE #pgAdmin #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-17566/", "creation_timestamp": "2026-08-01T15:04:27.308861Z"}, {"uuid": "2b7b9837-71a9-4f5d-9075-e00c5866ba96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-04T17:00:04.825462Z"}, {"uuid": "3dbb6ca5-ac10-4e76-84f3-9b80d6b05226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "published-proof-of-concept", "source": "Telegram/LqdU20CE0Hk-SL_FPOS2WnuOEvVMOSrUkoEKMOvVibc5ya4", "content": "", "creation_timestamp": "2026-08-05T00:00:26.543914Z"}, {"uuid": "cd5471d6-6464-4d7b-8aa8-e9b29eeac707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-17566", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-molteplici-vulnerabilita-in-pgadmin", "content": "", "creation_timestamp": "2026-08-03T16:45:03.999989Z"}, {"uuid": "3c909fe9-17c5-4175-9c90-a16ff6c817c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxgkvuq372u", "content": "\ud83d\udd34 CVE-2026-17566 - Critical (9.9)\n\npgAdmin 4's Import/Export Data tool builds a psql \\copy (...) command line by interpolating a use...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-17566/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-31T17:00:56.473779Z"}, {"uuid": "7ae7e26b-7c66-462c-aaa1-75a1ed54ff8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrxgqkc5lt2i", "content": "CVE-2026-17566 - pgadmin 4\nAn attacker can exploit a weakness in pgAdmin 4's Import/Export Data tool to run unauthorized commands on your PostgreSQL database. This is a significant risk, as it could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pgadmin4 #pgadminorg #CVE #infosec", "creation_timestamp": "2026-07-31T17:04:05.652161Z"}, {"uuid": "a43a6aa5-aa17-4501-ae5c-b58c1a9ed1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "published-proof-of-concept", "source": "Telegram/ubMxN9VMabMrJ7rvptmD8NbSolwJbrtCzhuDoQkI-rmXIlM", "content": "", "creation_timestamp": "2026-08-05T00:00:08.878639Z"}, {"uuid": "049f35b2-1b6d-4c35-8256-88435976addc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "seen", "source": "https://t.me/GithubRedTeam/96598", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-17566\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 13:01:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\npgAdmin 4 Import/Export RCE (CVE-2026-17566) PoC - TO PROGRAM injection via backslash-escape mismatch\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T14:00:05.996390Z"}, {"uuid": "8074c418-ea8c-4b0e-a3fd-6a65d203a2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96598", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #POC #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-17566\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-04 13:01:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\npgAdmin 4 Import/Export RCE (CVE-2026-17566) PoC - TO PROGRAM injection via backslash-escape mismatch\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T00:00:28.450357Z"}, {"uuid": "9ffd4379-f6d5-4070-87ba-8b8a62ef0b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "seen", "source": "https://t.me/bdufstecru/3380", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0430 \u0438\u043c\u043f\u043e\u0440\u0442\u0430/\u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 (Import/Export Data) \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 pgAdmin 4 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435\n\nBDU:2026-11412\nCVE-2026-17566\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/pgadmin-org/pgadmin4/commit/1496fabe28c9f825f6bac0f0d000d9d3276322c3", "creation_timestamp": "2026-08-12T15:00:03.396317Z"}, {"uuid": "3e7fd9ee-f923-482b-9eff-9e7361b65552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3380", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0430 \u0438\u043c\u043f\u043e\u0440\u0442\u0430/\u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 (Import/Export Data) \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 pgAdmin 4 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435\n\nBDU:2026-11412\nCVE-2026-17566\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/pgadmin-org/pgadmin4/commit/1496fabe28c9f825f6bac0f0d000d9d3276322c3", "creation_timestamp": "2026-08-13T00:00:08.903979Z"}, {"uuid": "a8cfe0ea-c96d-4179-9e13-d3f38504b007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfd5nnxj72v", "content": "\ud83d\udccc CVE-2026-17566 - pgAdmin 4's Import/Export Data tool builds a psql \\copy (...) command line by interpolating a user-supplied SQL query into a Jinja template and passin... https://www.cyberhub.blog/cves/CVE-2026-17566", "creation_timestamp": "2026-08-06T05:37:06.497509Z"}, {"uuid": "e548d34c-d88c-4c59-96c4-83801fb33ecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/473", "content": "CVE-2026-17566", "creation_timestamp": "2026-08-28T00:00:38.507711Z"}, {"uuid": "44264d4e-a2c7-4157-8eac-3ac1b1f8cc7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17566", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/473", "content": "CVE-2026-17566", "creation_timestamp": "2026-08-27T15:00:04.816623Z"}]}