144 matches found
CVE-2026-92867
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
CVE-2026-92867
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
PT-2026-103065
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information...
PT-2026-103064
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...
CVE-2026-92871: NULL Pointer Dereference
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...
CVE-2026-92873: Incorrect Implementation of Authentication Algorithm
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node...
PT-2026-103062
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...
PT-2026-103074
Name of the Vulnerable Software and Affected Versions Pgpool-II affected versions not specified Description An incorrect implementation of an authentication algorithm allows an unauthenticated attacker to promote an arbitrary watchdog node to the leader node. Recommendations At the moment, there ...
CVE-2026-92872: Insertion of Sensitive Information into Log File
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information...
CVE-2026-92869: Out-of-bounds Write
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...
CVE-2026-92870: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...
PT-2026-103063
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...
PT-2026-103061
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
CVE-2026-92868: Improper Certificate Validation
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
CVE-2026-92867: Out-of-bounds Write
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
Multiple vulnerabilities in Pgpool-II
Overview Pgpool-II provided by Pgpool Global Development Group contains multiple vulnerabilities listed below: Out-of-bounds Write CWE-787 - CVE-2026-92867 Improper Certificate Validation CWE-295 - CVE-2026-92868 Out-of-bounds Write CWE-787 - CVE-2026-92869 Stack-based Buffer Overflow CWE-121 -...
PT-2026-102914
Name of the Vulnerable Software and Affected Versions Pgpool-II versions prior to 4.7.3 Description An improper certificate validation issue exists that may allow an unauthenticated attacker to bypass client certificate authentication. Approximately 101 instances have been identified globally...
Security Bulletin: CVE-2025-46801 - Pgpool-II Authentication Bypass
Summary Pgpool-II contains an authentication bypass vulnerability that can be exploited under certain conditions. If an attacker exploits the vulnerability they may be able to log in to the system as an arbitrary user, which could allow them to read or tamper with data in the database, and/or...
Security Bulletin: CVE-2025-46801 - Pgpool-II Authentication Bypass
Summary Pgpool-II contains an authentication bypass vulnerability that can be exploited under certain conditions. If an attacker exploits the vulnerability they may be able to log in to the system as an arbitrary user, which could allow them to read or tamper with data in the database, and/or...
Security Bulletin: CVE-2025-46801 - Pgpool-II Authentication Bypass
Summary Pgpool-II contains an authentication bypass vulnerability that can be exploited under certain conditions. If an attacker exploits the vulnerability they may be able to log in to the system as an arbitrary user, which could allow them to read or tamper with data in the database, and/or...