The vulnerability of the pg_createsubscriber function in the PostgreSQL database management system allows a hacker to execute arbitrary SQL queries.

🗓️ 20 May 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

PostgreSQL pg_createsubscriber vulnerability allows arbitrary SQL execution via unsafe query design.

Reporter	Title	Published	Views	Family All 87
FreeBSD	PostgreSQL -- Multiple vulnerabilities	14 May 202600:00	–	freebsd
ATTACKERKB	CVE-2026-6476	14 May 202613:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : postgresql17, postgresql17-contrib, postgresql17-llvmjit (ALAS2023-2026-1766)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : postgresql18, postgresql18-contrib, postgresql18-llvmjit (ALAS2023-2026-1780)	8 Jun 202600:00	–	nessus
Tenable Nessus	Debian dsa-6270 : libecpg-compat3 - security update	14 May 202600:00	–	nessus
Tenable Nessus	FreeBSD : PostgreSQL -- Multiple vulnerabilities (7185ecc9-4fb7-11f1-bc50-6cc21735f730)	15 May 202600:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : postgresql18 (openSUSE-SU-2026:20901-1)	11 Jun 202600:00	–	nessus
Tenable Nessus	Oracle Linux 10 : postgresql18 (ELSA-2026-27742)	20 Jul 202600:00	–	nessus
Tenable Nessus	PostgreSQL 14.x < 14.23 / 15.x < 15.18 / 16.x < 16.14 / 17.x < 17.10 / 18.x < 18.4 Multiple Vulnerabilities	22 May 202600:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : postgresql17 (SUSE-SU-2026:1943-1)	19 May 202600:00	–	nessus

Vulners

Node

OR

postgres_professional postgres_pro_certifiedRange≤18.3

postgres_professional postgres_pro_certifiedRange≤17.9

postgresql postgresqlRange<18.4

postgresql postgresqlRange<17.10

postgres_professional postgresproRange<14.23.1

postgres_professional postgresproRange<15.18.1

postgres_professional postgresproRange<16.14.1

postgres_professional postgresproRange<17.10.1

postgres_professional postgresproRange<18.4.1

postgres_professional postgres_pro_enterpriseRange<14.23.1

postgres_professional postgres_pro_enterpriseRange<15.18.1

postgres_professional postgres_pro_enterpriseRange<16.14.1

postgres_professional postgres_pro_enterpriseRange<17.10.1

postgres_professional postgres_pro_enterpriseRange<18.4.1

Source	Link
postgresql	www.postgresql.org/support/security/CVE-2026-6476/
postgresql	www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-6476
cybersecurity-help	www.cybersecurity-help.cz/vdb/vulns/131458/
suse	www.suse.com/security/cve/CVE-2026-6476.html
repo	www.repo.red-soft.ru/redos/8.0/x86_64/updates/
postgrespro	www.postgrespro.ru/docs/postgrespro/current
web	www.web.nvd.nist.gov/view/vuln/detail

16 Jul 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 37.2

CVSS 29

EPSS0.00287

postgresql vulnerability arbitrary queries remote execution unsafe query design pg createsubscriber