ECHO-1690-243F-9082

Bulletin has no description...

ECHO-81A7-2888-C43B

Bulletin has no description...

UBUNTU-CVE-2026-18024

Buffer over-read in PostgreSQL ascii SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value. This is the same class of defect that CVE-2026-2006 fixed, though this instance has less impact. Versions before PostgreSQL 18.5, 17.11, 16.1...

MINI-MQ7V-JF53-7RFC

Bulletin has no description...

CGA-PVQH-28HF-4M7F

Bulletin has no description...

CGA-626P-RFMC-3PXP

Bulletin has no description...

MINI-7597-9M3M-2683

Bulletin has no description...

MINI-J39H-V576-P4RG

Bulletin has no description...

CVE-2026-73625

creationtimestamp| type| source ---|---|--- 2026-08-13 13:00:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/32wcjv3b7dqkl 2026-08-15 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt4qnvwf5g2f...

CVE-2026-14671 PostgreSQL refint plan cache type confusion executes arbitrary code

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...

EUVD-2026-57858

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...

CVE-2026-6470

Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type. Many DDL operations did check the privilege, but assigning a range subtype and referencing the type from an SQL...

EUVD-2026-57853

Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pgdump, via a crafted transform list. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...

CVE-2026-14664 PostgreSQL regexp heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when...

ECHO-D837-AA5E-CF4E

Bulletin has no description...

MINI-98H8-6FW9-5W6P

Bulletin has no description...

MINI-3HQ7-M7RM-4CG9

Bulletin has no description...

MINI-H578-Q7P5-WRJJ

Bulletin has no description...

MINI-Q874-V444-7JGQ

Bulletin has no description...

PT-2026-71490

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Missing authorization in logical decoding allows a...