PT-2026-71472

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 18.0 through 18.4 Description A heap buffer overflow exists in the pg stat statements module. This issue allows a query author to execute arbitrary code with the privileges of the operating system user running the database ...

PT-2026-71469

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Type confusion in the "refint" module allows an object...

PT-2026-71484

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Untrusted data inclusion in pg dump, pg dumpall, and pg...

PT-2026-71468

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A heap buffer overflow occurs in the plperl language...

PT-2026-71465

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Incomplete tracking of changes to role membership, role...

PT-2026-71489

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Missing authorization in Data Definition Language DDL...

PT-2026-71490

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 9.4 through 18.5 Description Missing authorization in the logical decoding subsystem allows a non-superuser with the REPLICATION privilege to execute arbitrary code as the operating system account running the server. The...

PT-2026-71473

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description An integer wraparound issue exists in 32-bit builds of th...

PT-2026-71480

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 18.0 through 18.4 Description Type confusion in the pg restore attribute stats function allows an object creator to execute arbitrary code with the privileges of the operating system user running the database. This occurs d...

PT-2026-71477

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 17.0 through 17.10 PostgreSQL versions 18.0 through 18.4 Description Improper enforcement of message integrity in GSSAPI support allows a user to negotiate GSSAPI in a manner that contradicts pg hba.conf rules during an...

PT-2026-71485

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A heap buffer overflow occurs in the pg dump utility when...

PT-2026-71463

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description The pgcrypto module allows cleartext storage when disable...

PT-2026-71466

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Type confusion in the PostgreSQL ctid data type selectivi...

PT-2026-71464

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A heap buffer overflow exists in the regular expression...

PT-2026-71474

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A buffer over-read occurs in the picksplit function of th...

PT-2026-71467

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A heap buffer overflow occurs in the to chartimestamptz...

PT-2026-71471

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description An untrusted search path in the amcheck function allows a user with EXECUTE privileges to...

PT-2026-71476

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Type confusion involving the internal data type arguments...

PT-2026-71482

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description An integer underflow in the ECPG client allows a database...

PT-2026-71487

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Untrusted data inclusion in psql COPY may allow a server...