CVE-2026-61781

pg_partman , a PostgreSQL extension for managing partitioned tables, contains a privilege escalation vulnerability in create_partition_time() . The function reads the writable part_config.time_encoder text value and interpolates it without identifier quoting into a dynamically executed SELECT sta...

CLEANSTART-2026-UY39386 Security fix for CVE-2023-5870 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5870 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZS91347 Security fix for CVE-2023-5869 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5869 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FA69444 Security fix for CVE-2024-0985 applied in: postgresql15 15.6-r0, postgresql16 16.2-r0, postgresql17 16.2-r0, postgresql18 16.2-r0

CVE-2024-0985 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JD37353 Security fix for CVE-2023-5868 applied in: postgresql15 15.5-r0, postgresql16 16.1-r0, postgresql17 16.1-r0, postgresql18 16.1-r0

CVE-2023-5868 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PN72397 Security fix for CVE-2024-7348 applied in: postgresql15 15.8-r0, postgresql16 16.4-r0, postgresql17 16.4-r0, postgresql18 16.4-r0

CVE-2024-7348 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NE41969 Security fix for CVE-2025-8715 applied in: postgresql16 16.10-r0, postgresql17 17.6-r0, postgresql18 17.6-r0

CVE-2025-8715 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HH85591 Security fix for CVE-2025-8714 applied in: postgresql16 16.10-r0, postgresql17 17.6-r0, postgresql18 17.6-r0

CVE-2025-8714 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LW24877 Security fix for CVE-2025-8713 applied in: postgresql16 16.10-r0, postgresql17 17.6-r0, postgresql18 17.6-r0

CVE-2025-8713 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-KJ04001 Security fix for CVE-2025-51476 applied in: postgresql15 15.15-r0, postgresql16 16.11-r0

CVE-2025-51476 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-PZ79070 Security fix for CVE-2025-51477 applied in: postgresql15 15.15-r0, postgresql16 16.11-r0

CVE-2025-51477 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

EUVD-2026-82597

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

CVE-2026-85878

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

CVE-2026-85878: Improper Authorization

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

CVE-2026-61822: Improper Check or Handling of Exceptional Conditions

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance handles exceptions outside the loop that processes rows from partconfig, so an exception for one partition set immediately terminates the loop and skips every later set. A role with...

CVE-2026-61821: Missing Authorization

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, droppartitionid and droppartitiontime use partconfig.retentionschema as the target for ALTER TABLE SET SCHEMA and accept any nonempty schema name. A role with partmanuser access can select a target...

CVE-2026-61819: Improper Neutralization of Special Elements used in an SQL Command

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, when pgjobmon is installed and partconfig.jobmon is true, exception handlers in multiple pgpartman functions place pparenttable verbatim inside a SQL string literal used to call pgjobmon.addjob. A...

CVE-2026-61781: Improper Neutralization of Special Elements used in an SQL Command

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, createpartitiontime reads the writable partconfig.timeencoder text value and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with the documented...

CVE-2026-61818: Improper Neutralization of Special Elements used in an SQL Command

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undopartition reads partconfig.timeencoder as unrestricted text and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with partmanuser access can store...

CVE-2026-61820: Improper Neutralization of Special Elements used in an SQL Command

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherittemplateproperties manually surrounds primary-key column names from pgattribute.attname with double quotes without escaping embedded double-quote characters. A partmanuser who owns a template...