PatchTheCVEpostgres enterprise manager vulnerabilities and fixes
Recent CVEs affecting postgres enterprise manager, with upgrade or downgrade steps. 1 tracked.
Also searched as: postgresenterprisemanager.
postgres enterprise manager has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-01-16. Highest priority: CVE-2026-0949 (score 26/100).
- CVE-2026-0949 MEDIUM 6.5 UPGRADE PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows user
FAQ
How do I fix postgres enterprise manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is postgres enterprise manager being exploited right now?
None of the tracked postgres enterprise manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which postgres enterprise manager CVE should I patch first?
CVE-2026-0949 currently ranks highest (26/100): PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows user.