CVE-2026-116336

Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

postgresql: postgresql: Arbitrary code execution via dropped index in REINDEX CONCURRENTLY

A flaw was found in PostgreSQL. An authenticated database user with privileges to create objects can execute arbitrary code on the host system as the operating system user running the database service. This vulnerability occurs when the REINDEX CONCURRENTLY operation processes an index expression...

CVE-2026-116336

A flaw was found in PostgreSQL. An authenticated database user with privileges to create objects can execute arbitrary code on the host system as the operating system user running the database service. This vulnerability occurs when the REINDEX CONCURRENTLY operation processes an index expression...

ALPINE-CVE-2026-116336

Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-116336

Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

DEBIAN-CVE-2026-116336

Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-116336

Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

EUVD-2026-124515

Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-116336

Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-116336 PostgreSQL REINDEX CONCURRENTLY does not block DROP INDEX during index functions

Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-116336

PostgreSQL is affected by a vulnerability where the REINDEX CONCURRENTLY operation does not block DROP INDEX during index functions. This allows an object creator to execute arbitrary code as the operating system user running the database by using an index expression that issues a DROP INDEX on a...

CVE-2026-116336: n/a PostgreSQL: Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as…

Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

Vulnerability in core server (CVE-2026-116336)

PostgreSQL REINDEX CONCURRENTLY does not block DROP INDEX during index functions Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as the operating system user running the database, via an index expression that issues DROP INDEX...

PT-2026-145825

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.7 PostgreSQL versions prior to 17.12 PostgreSQL versions prior to 16.16 PostgreSQL versions prior to 15.20 PostgreSQL versions prior to 14.25 Description An object creator can execute arbitrary code with the...

Unity Linux 20.1070a Security Update: postgresql (UTSA-2026-151344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151344 advisory. A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The...

Unity Linux 20.1070a Security Update: postgresql (UTSA-2026-151341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151341 advisory. A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The...

CVE-2026-113370

Sonatype Nexus Repository 3 contains a SQL injection vulnerability (CWE-89) within the optional **

CVE-2026-113370 Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task

Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern" task. A user who holds the nexus:tasks:create privilege can supply a crafted filter condition that the database runs as SQL. This allows the user to modify data in the Nexus...

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc (crlsa-2022_4807)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224807 advisory. postgresql: Autovacuum, REINDEX, and others omit security restricted operation sandbox CVE-2022-1552 Tenable has extracted the preceding description block directly...

Rocky Linux 8 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc (crlsa-2022_4805)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20224805 advisory. postgresql: Autovacuum, REINDEX, and others omit security restricted operation sandbox CVE-2022-1552 Tenable has extracted the preceding description block directly...