The vulnerability of the implementation of the ALTER SUBSCRIPTION...REFRESH PUBLICATION command in the PostgreSQL database management system allows a attacker to execute arbitrary SQL queries.

🗓️ 20 May 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

The ALTER SUBSCRIPTION REFRESH PUBLICATION command in PostgreSQL can be exploited to execute arbitrary SQL queries remotely.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	16 Jun 202615:07	–	ibm
ATTACKERKB	CVE-2026-6638	14 May 202613:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : postgresql17, postgresql17-contrib, postgresql17-llvmjit (ALAS2023-2026-1766)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : postgresql16, postgresql16-contrib, postgresql16-llvmjit (ALAS2023-2026-1767)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : postgresql18, postgresql18-contrib, postgresql18-llvmjit (ALAS2023-2026-1780)	8 Jun 202600:00	–	nessus
Tenable Nessus	Debian dsa-6270 : libecpg-compat3 - security update	14 May 202600:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : postgresql18 (openSUSE-SU-2026:20901-1)	11 Jun 202600:00	–	nessus
Tenable Nessus	PostgreSQL 14.x < 14.23 / 15.x < 15.18 / 16.x < 16.14 / 17.x < 17.10 / 18.x < 18.4 Multiple Vulnerabilities	22 May 202600:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : postgresql16 (SUSE-SU-2026:1942-1)	19 May 202600:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : postgresql17 (SUSE-SU-2026:1943-1)	19 May 202600:00	–	nessus

Vulners

Node

postgres_professional postgres_pro_certifiedRange≤18.3

OR

postgres_professional postgres_pro_certifiedRange≤17.9

OR

postgres_professional postgres_pro_certifiedRange≤16.13

OR

postgresql postgresqlRange<18.4

OR

postgresql postgresqlRange<17.10

OR

postgresql postgresqlRange<16.14

Source	Link
postgresql	www.postgresql.org/support/security/CVE-2026-6638/
postgresql	www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-6638
cybersecurity-help	www.cybersecurity-help.cz/vdb/vulns/131464/
suse	www.suse.com/security/cve/CVE-2026-6638.html
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

29 May 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 23.6

CVSS 33.7

EPSS0.0018

alter subscription refresh publication remote execution arbitrary queries postgresql