Important: Red Hat Security Advisory: postgresql-jdbc security update

🗓️ 25 Aug 2026 04:40:34Reported by RedHatType

redhat🔗 access.redhat.com👁 5 Views

Client-side DoS in postgresql-jdbc via malicious SCRAM-SHA-256 authentication (CVE-2026-42198).

Reporter	Title	Published	Views	Family All 149
IBM Security Bulletins	Security Bulletin: Vulnerability in pgjdbc affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:30	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for July 2026.	5 Aug 202610:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Tivoli Netcool Impact 7.1.1.0	1 Jul 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in the Containerized Version of IBM Guardium Key Lifecycle Manager	24 Jul 202614:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	29 Jun 202603:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in postgresql-42.6.1.jar	17 Jun 202615:24	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of postgresql-42.7.10.jar, IBM Sterling Connect:Direct Web Services is affected by client-side denial of service.	4 Jun 202603:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	20 May 202620:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	3 Aug 202614:48	–	ibm
ATTACKERKB	CVE-2026-42198	29 Apr 202615:58	–	attackerkb

Source	Link
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

25 Aug 2026 09:28Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.03261

SSVC

postgresql-jdbc denial of service SCRAM-SHA-256 client-side Red Hat CVE-2026-42198