PT-2026-65845

Name of the Vulnerable Software and Affected Versions ClickHouse Server versions prior to 26.3.9.8 Description A SQL Injection issue exists that allows a remote attacker to execute arbitrary code. The flaw is triggered through the create dictionaries function. Recommendations Update ClickHouse...

CVE-2026-51992

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. ClickHouse's PostgreSQL integration intentionally allows users with valid PostgreSQL credentials to execute queries against a remote PostgreSQL server. No vulnerability in ClickHouse is exploited; code execution occurs on...

CVE-2026-51992

...