EnterpriseDB Postgres Enterprise Manager (PEM)
- CVE-2026-0949 PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage Charts menu to inject arbitrary JavaScript when creating a new 0.2%