CVE-2026-14681

A flaw was found in PostgreSQL. Improper enforcement of message integrity in PostgreSQL's GSSAPI Generic Security Service Application Program Interface support allows a user to negotiate GSSAPI contrary to pghba.conf rules by initiating a direct TLS Transport Layer Security connection. This enabl...