CVE-2026-6476 PostgreSQL pg_createsubscriber allows SQL injection via subscription name

🗓️ 14 May 2026 13:00:11Reported by PostgreSQLType

CVE-2026-6476: PostgreSQL pg_createsubscriber allows SQL injection via subscription name on versions 17 and 18; minor 18.4 and 17.10 affected.

Reporter	Title	Published	Views	Family All 68
FreeBSD	PostgreSQL -- Multiple vulnerabilities	14 May 202600:00	–	freebsd
ATTACKERKB	CVE-2026-6476	14 May 202613:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : postgresql17, postgresql17-contrib, postgresql17-llvmjit (ALAS2023-2026-1766)	8 Jun 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : postgresql18, postgresql18-contrib, postgresql18-llvmjit (ALAS2023-2026-1780)	8 Jun 202600:00	–	nessus
Tenable Nessus	Debian dsa-6270 : libecpg-compat3 - security update	14 May 202600:00	–	nessus
Tenable Nessus	FreeBSD : PostgreSQL -- Multiple vulnerabilities (7185ecc9-4fb7-11f1-bc50-6cc21735f730)	15 May 202600:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : postgresql18 (openSUSE-SU-2026:20901-1)	11 Jun 202600:00	–	nessus
Tenable Nessus	PostgreSQL 14.x < 14.23 / 15.x < 15.18 / 16.x < 16.14 / 17.x < 17.10 / 18.x < 18.4 Multiple Vulnerabilities	22 May 202600:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : postgresql17 (SUSE-SU-2026:1943-1)	19 May 202600:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : postgresql18 (SUSE-SU-2026:1944-1)	19 May 202600:00	–	nessus

[
  {
    "defaultStatus": "unaffected",
    "product": "PostgreSQL",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "18.4",
        "status": "affected",
        "version": "18",
        "versionType": "rpm"
      },
      {
        "lessThan": "17.10",
        "status": "affected",
        "version": "17",
        "versionType": "rpm"
      }
    ]
  }
]

Source	Link
postgresql	www.postgresql.org/support/security/CVE-2026-6476/

14 May 2026 13:00Current

CVSS 3.17.2

EPSS0.00035

CWE-89