17697 matches found
CVE-2026-50736: Improper Neutralization of Special Elements used in an SQL Command
The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the privilege level of the apply worker, which is equivalent to a PostgreSQL superuser in default installations. A party actin...
CakePHP 5.4.1 Released
CakePHP 5.4.1 Released The CakePHP core team is happy to announce the immediate availability of CakePHP 5.4.1. This is a maintenance release for the 5.4 branch that fixes community reported issues, regressions and a security issue with RateLimitMiddleware. Thank you to yousukezan for reporting th...
Postgres Vulnerabilities in Brocade SANanv before 3.0.1 - CVE-2026-2006, CVE-2026-2005, CVE-2026-2004, CVE-2026-2003
Security update is provided in Brocade SANav for multiple Postgres vulnerabilities. CVE-2026-2006 PostgreSQL missing validation of multibyte character length executes arbitrary code Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue...
RHEL 8 : libpq (RHSA-2026:47090)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47090 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql:...
K000162463: PostgreSQL vulnerability CVE-2026-6478
Security Advisory Description Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current...
K000162461: PostgreSQL vulnerability CVE-2026-6475
Security Advisory Description Symlink following in PostgreSQL pgbasebackup plain format and in pgrewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these...
K000162429: PostgreSQL vulnerability CVE-2026-6479
Security Advisory Description Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AFUNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled, an attacker can do the same via access to a PostgreSQL TCP socket...
RLSA-2026:44391 Important: libpq security update
The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 For more details about the security issues,...
libpq security update
An update is available for libpq. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libpq package provides the PostgreSQL client library, which allows client...
RLSA-2026:44308 Important: libpq security update
The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 For more details about the security issues,...
libpq security update
An update is available for libpq. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libpq package provides the PostgreSQL client library, which allows client...
BIT-OPENBAO-2026-39946 OpenBao allows SQL Injection in PostgreSQL database secrets engine
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, when OpenBao revoked privileges on a role in the PostgreSQL database secrets engine, OpenBao failed to use proper database quoting on schema names provided by PostgreSQL. This could lead to role revocation...
PT-2026-65054
OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, when OpenBao revoked privileges on a role in the PostgreSQL database secrets engine, OpenBao failed to use proper database quoting on schema names provided by PostgreSQL. This could lead to role revocation...
MiracleLinux 9 : postgresql:16 (AXSA:2026-1358:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1358:01 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...
RockyLinux 10 : libpq (RLSA-2026:44391)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:44391 advisory. postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 Tenable has extracted the preceding...
RockyLinux 9 : libpq (RLSA-2026:44308)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:44308 advisory. postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVE-2026-6477 Tenable has extracted the preceding...
Drupal CVE-2026-9082 PostgreSQL SQLi Detect
Detects CVE-2026-9082 SA-CORE-2026-004 on PostgreSQL-backed Drupal via JSON:API filter value array keys. Confirms the blind error oracle: injected key 0||1/CASE WHEN 1=1 THEN 0 ELSE 1 END yields HTTP 500, 1=0 yields HTTP 200 on GET /jsonapi/type?filteracondition... !/usr/bin/env python3 -- coding...
Drupal PostgreSQL SQLi (CVE-2026-9082)
CVE-2026-9082 SA-CORE-2026-004: PostgreSQL-only blind SQL injection via JSON:API filter value array keys or POST /user/login name keys. translateCondition concatenates the key into a PDO placeholder; 0||1/CASE WHEN predicate THEN 0 ELSE 1 END turns true predicates into HTTP 500 divisionbyzero and...
Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL
Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.4.1. Vulnerability Details CVEID:CVE-2026-39830 DESCRIPTION: A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked...