Oracle Linux 9 : postgresql (ELSA-2026-69607)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-69607 advisory. - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - F...

postgresql security update

13.23-6 - Fix CVE-2026-14662 - Fix CVE-2026-14664 - Fix CVE-2026-14668 - Fix CVE-2026-14669 - Fix CVE-2026-14670 - Fix CVE-2026-14671 - Fix CVE-2026-14677 - Fix CVE-2026-14679 - Fix CVE-2026-14680 - Fix CVE-2026-15742 - Fix CVE-2026-16239 - Fix CVE-2026-18408 - Fix CVE-2026-19385 - Fix...

ROOT-OS-DEBIAN-11-CVE-2026-18408 CVE-2026-18408 in postgresql-13 - Patched by Root

Root has patched CVE-2026-18408 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-18408 affecting package postgresql for versions less than 16.15-1

CVE-2026-18408 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-18408

creationtimestamp| type| source ---|---|--- 2026-08-20 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtjeitsof52b...

BELL-CVE-2026-18408

Bulletin has no description...

DEBIAN-CVE-2026-18408

Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \restrict meta-command input expansion. The fix for CVE-2025-871...

Linux Distros Unpatched Vulnerability : CVE-2026-18408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the...

Vulnerability in client (CVE-2026-18408)

PostgreSQL psql \unrestrict lets superuser of pgdump origin server execute arbitrary code in psql client Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account...