165 matches found
EUVD-2026-89657
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
CVE-2026-92867
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
CVE-2026-92867
An out-of-bounds write vulnerability exists in Pgpool-II , which could allow an authenticated attacker to cause abnormal process termination or achieve arbitrary code execution . While technical details regarding the specific root cause or affected versions are not provided in the documents, the ...
CVE-2026-92867
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
PT-2026-103065
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information...
PT-2026-103064
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...
CVE-2026-92871: NULL Pointer Dereference
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...
CVE-2026-92867: Out-of-bounds Write
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
CVE-2026-92868: Improper Certificate Validation
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication...
PT-2026-103062
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...
CVE-2026-92872: Insertion of Sensitive Information into Log File
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information...
CVE-2026-92869: Out-of-bounds Write
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...
PT-2026-103074
Name of the Vulnerable Software and Affected Versions Pgpool-II affected versions not specified Description An incorrect implementation of an authentication algorithm allows an unauthenticated attacker to promote an arbitrary watchdog node to the leader node. Recommendations At the moment, there ...
CVE-2026-92870: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...
PT-2026-103061
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...
CVE-2026-92873: Incorrect Implementation of Authentication Algorithm
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node...
PT-2026-103063
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...
Multiple vulnerabilities in Pgpool-II
Overview Pgpool-II provided by Pgpool Global Development Group contains multiple vulnerabilities listed below: Out-of-bounds Write CWE-787 - CVE-2026-92867 Improper Certificate Validation CWE-295 - CVE-2026-92868 Out-of-bounds Write CWE-787 - CVE-2026-92869 Stack-based Buffer Overflow CWE-121 -...
PT-2026-102914
Name of the Vulnerable Software and Affected Versions Pgpool-II versions prior to 4.7.3 Description An improper certificate validation issue exists that may allow an unauthenticated attacker to bypass client certificate authentication. Approximately 101 instances have been identified globally...
Astra Linux – Vulnerability in pgpool2
The Pgpool-II provided by PgPool Global Development Group contains a authentication bypass vulnerability as a primary weakness. If this vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/...