CVE-2026-18447

Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type "any". Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-18447 PostgreSQL output parameter type confusion executes arbitrary code

Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type "any". Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-18447

Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type "any". Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-18447

A type confusion vulnerability in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database. This issue is triggered via an output parameter of type "any" . Affected versions include those prior to PostgreSQL 18.7, 17.12...

EUVD-2026-124432

Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type "any". Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

CVE-2026-18447: n/a PostgreSQL: Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating…

Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type "any". Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

PT-2026-145848

Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type "any". Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected...

Vulnerability in core server (CVE-2026-18447)

PostgreSQL output parameter type confusion executes arbitrary code Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating system user running the database, via an output parameter of type "any". Versions before PostgreSQL 18.7, 17.1...

Denial Of Service (DoS)

postgresql is vulnerable to denial of service. Two flaws were found in the way the PostgreSQL server handles certain SQL-language functions. An authenticated user could execute a sequence of command which could crash the PostgreSQL server or possibly read from arbitrary memory locations. A user...