CVE-2026-16238

Type confusion in PostgreSQL pgrestoreattributestats allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

PT-2026-71480

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 18.0 through 18.4 Description Type confusion in the pg restore attribute stats function allows an object creator to execute arbitrary code with the privileges of the operating system user running the database. This occurs d...

CVE-2026-16238: Access of Resource Using Incompatible Type

Type confusion in PostgreSQL pgrestoreattributestats allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.5 are affected. Versions before...