{"vulnerability": "CVE-2026-86863", "sightings": [{"uuid": "fbad3989-53d8-4e88-9939-fbd4593787f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86863", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqasfq6yb2t", "content": "\ud83d\udea8 CVE-2026-86863 \u2014 CVSS 9.3 CRITICAL\n\npgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86863\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T18:09:54.827843Z"}, {"uuid": "2312b269-4cfb-4f0e-9120-9ad4390938df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86863", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvq754fuo32t", "content": "CVE-2026-86863 - pgadmin 4\nWhen pgAdmin 4 is set to rely on the web server to confirm a user's identity, an attacker can send a custom request header and be accepted as any user, even an administrator,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pgadmin4 #pgadminorg #CVE #infosec", "creation_timestamp": "2026-09-17T17:40:06.988798Z"}, {"uuid": "7a01e0ba-77de-4933-af4a-5c75df931ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86863", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvr6dayaww2t", "content": "A critical pgAdmin 4 authentication bypass (CVE-2026-86863) allows remote admin takeover. Patch this pgAdmin 4 authentication bypass vulnerability now.\n\n#pgAdmin #PostgreSQL #CVE202686863 #AuthenticationBypass #Cybersecurity", "creation_timestamp": "2026-09-18T02:58:18.206379Z"}]}