EUVD-2026-124504

SQL injection in PostgreSQL reindexdb allows an object creator to execute arbitrary SQL as the database user running reindexdb, via a crafted index name embedded in the parallel catalog query for --jobs with --index. Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are...

CVE-2026-116325

A SQL injection vulnerability exists in PostgreSQL reindexdb due to improper quoting of index names. An object creator can execute arbitrary SQL as the database user running reindexdb by providing a crafted index name in the parallel catalog query when using the --jobs and --index options. This v...