CVE-2026-62845

Kamaji (Hosted Control Plane Manager for Kubernetes) is affected by a SQL injection in the PostgreSQL and MySQL datastore drivers. The root cause is that DataStoreUsername and DataStoreSchema are interpolated into SQL statements via fmt.Sprintf without escaping identifiers, and these fields have ...

CVE-2026-54368

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...

CVE-2026-54368 CentreStack < 17.4 SQL Injection via x-glad-filter Header

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx and SearchExUnder that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized...

CLEANSTART-2026-ID39786 Security fixes in postgresql 15.4-r0

Package postgresql version 15.4-r0 fixes 2 vulnerabilities: CVE-2023-39418, CVE-2023-39417...

CLEANSTART-2026-SX71048 Security fixes in postgresql 10.2-r0

Package postgresql version 10.2-r0 fixes 2 vulnerabilities: CVE-2018-1052, CVE-2018-1053...

CLEANSTART-2026-WU12627 Security fixes in postgresql15 14.5-r0

Package postgresql15 version 14.5-r0 fixes 1 vulnerabilities: CVE-2022-2625...

CLEANSTART-2026-DO95093 Security fixes in postgresql 16.10-r0

Package postgresql version 16.10-r0 fixes 3 vulnerabilities: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715...

CLEANSTART-2026-RG25536 Security fixes in postgresql 16.9-r0

Package postgresql version 16.9-r0 fixes 1 vulnerabilities: CVE-2025-4207...

CLEANSTART-2026-LV27389 Security fixes in postgresql 14.5-r0

Package postgresql version 14.5-r0 fixes 1 vulnerabilities: CVE-2022-2625...

CLEANSTART-2026-AB94931 Security fixes in postgresql 9.6.4-r0

Package postgresql version 9.6.4-r0 fixes 3 vulnerabilities: CVE-2017-7546, CVE-2017-7547, CVE-2017-7548...

CLEANSTART-2026-FR04784 Security fixes in postgresql 12.4-r0

Package postgresql version 12.4-r0 fixes 2 vulnerabilities: CVE-2020-14349, CVE-2020-14350...

CLEANSTART-2026-SJ62323 Security fixes in postgresql15 13.4-r0

Package postgresql15 version 13.4-r0 fixes 1 vulnerabilities: CVE-2021-3677...

CLEANSTART-2026-KV50780 Security fixes in postgresql 17.7-r0

Package postgresql version 17.7-r0 fixes 2 vulnerabilities: CVE-2025-12817, CVE-2025-12818...

CLEANSTART-2026-HM56624 Security fixes in postgresql 17.6-r0

Package postgresql version 17.6-r0 fixes 3 vulnerabilities: CVE-2025-8713, CVE-2025-8714, CVE-2025-8715...

CLEANSTART-2026-SL86983 Security fixes in postgresql 16.5-r0

Package postgresql version 16.5-r0 fixes 4 vulnerabilities: CVE-2024-10976, CVE-2024-10977, CVE-2024-10978, CVE-2024-10979...

PT-2026-66614

Name of the Vulnerable Software and Affected Versions ansible-collection-redhat-leapp affected versions not specified Description A flaw exists when a remediation task is executed with elevated privileges and the leapp old postgresql data option is selected. This results in the creation of a...

Linux Distros Unpatched Vulnerability : CVE-2026-68563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ansible-collection-redhat-leapp. When a remediation task is executed with elevated privileges and the leappoldpostgresqldata option is...

RLSA-2026:27741 Important: postgresql security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite...

postgresql security update

An update is available for postgresql. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PostgreSQL is an advanced object-relational database management system DBM...

MiracleLinux 9 : postgresql:15 (AXSA:2026-1374:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1374:01 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...