{"id":4833,"date":"2026-01-20T15:01:14","date_gmt":"2026-01-20T13:01:14","guid":{"rendered":"https:\/\/altanet.ro\/?p=4833"},"modified":"2026-04-14T14:10:29","modified_gmt":"2026-04-14T11:10:29","slug":"vulnerabilitati-software-critice-pgadmin-plesk-fortinet","status":"publish","type":"post","link":"https:\/\/altanet.ro\/en\/2026\/01\/20\/vulnerabilitati-software-critice-pgadmin-plesk-fortinet\/","title":{"rendered":"Specific Software Risks: When Administrator Tools Become Gateways for Hackers"},"content":{"rendered":"

We usually worry about employees opening emails with viruses or visiting questionable websites. But what happens when the danger comes from the very programs that IT uses to manage the network?<\/p>\n

In 2026, we witnessed a wave of critical vulnerabilities in extremely popular infrastructure software, such as pgAdmin<\/strong>, Plesk<\/strong> or Fortinet<\/strong> equipment. At Altanet Craiova<\/strong> we know that a \"hole\" in these programs is like leaving the right key in the server entrance door.<\/p>\n

Top 3 Vulnerabilities Targeting Corporate Infrastructure<\/strong><\/span><\/h2>\n

Hackers are now directly targeting the \"brain\" of the network. Here are the most risky targets identified recently:<\/p>\n

1. pgAdmin (Databases)<\/strong><\/h3>\n

pgAdmin is the most widely used tool for managing PostgreSQL databases. Recently, vulnerabilities were discovered that allow attackers to execute remote code if the pgAdmin server is exposed to the internet.
\n
Risk:<\/strong> Hackers can steal or delete a company's entire database without needing the administrator password.<\/p>\n

2. Plesk (Hosting Web)<\/strong><\/h3>\n

Plesk is the control panel used by thousands of businesses to host their websites. A recent XSS (Cross-Site Scripting) vulnerability combined with root privileges could give attackers complete control over all websites on that server.
\n
Risk:<\/strong> Your website could be replaced with phishing pages or used to attack other customers.<\/p>\n

3. Fortinet (Network Security)<\/strong><\/h3>\n

Fortinet VPN and Firewall appliances are the guardians of your network. However, the \u201cRemote Code Execution\u201d vulnerabilities discovered in their operating system (FortiOS) allow hackers to slip through your firewall like cheese.
\n
The Risk:<\/strong> Attackers can get into your internal network and install ransomware unhindered, even if you have a VPN enabled.<\/p>\n

How do you \"think\" about your infrastructure?<\/strong><\/h2>\n

The solution is not to give up on these tools (they are industry standard), but to manage them correctly:<\/p>\n