BIT-POSTGRESQL-2026-14671 PostgreSQL refint plan cache type confusion executes arbitrary code

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...

CVE-2026-14666

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

ALPINE-CVE-2026-14666

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

UBUNTU-CVE-2026-14671

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...

CVE-2026-14671 PostgreSQL refint plan cache type confusion executes arbitrary code

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...

CVE-2026-14671

The CVE-2026-14671 entry concerns PostgreSQL’s refint module, where a type confusion vulnerability could allow an object creator to execute arbitrary code as the database OS user. Affected versions are PostgreSQL prior to 18.5, 17.11, 16.15, 15.19, and 14.24. The fix is noted in the git history u...

CVE-2026-14671 PostgreSQL refint plan cache type confusion executes arbitrary code

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...

CVE-2026-14671

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a C...

CVE-2026-14666

CVE-2026-14666 affects PostgreSQL prior to versions 18.5, 17.11, 16.15, 15.19, and 14.24. The issue is incomplete tracking of changes to role membership, role attributes, and database ownership, causing a query to continue using cached row-level security policies after a policy change requires a ...

PT-2026-71469

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Type confusion in the "refint" module allows an object...

Vulnerability in contrib module (CVE-2026-14671)

PostgreSQL refint plan cache type confusion executes arbitrary code Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the g...

CVE-2025-36371

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view...

CVE-2025-36371

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view...

CVE-2025-36371

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view...

CVE-2025-36371

Summary: CVE-2025-36371 affects IBM i versions 7.2–7.6. The vulnerability is an information disclosure in the database plan cache implementation that could allow a user with database plan cache access to see information they are not authorized to view. Affected products/versions: IBM i 7.2, 7.3, ...

CVE-2025-36371 IBM i Information Disclosure

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view...

CVE-2025-36371 IBM i Information Disclosure

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view...

IBM i 安全漏洞

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i versions 7.2, 7.3, 7.4, 7.5, and 7.6, which stems from a problem with the implementation of the database plan cache and could...

PT-2025-47520

Name of the Vulnerable Software and Affected Versions IBM i versions 7.2 through 7.6 Description A flaw exists in the database plan cache implementation that could allow a user with database access to view information they are not authorized to see. Recommendations IBM i versions 7.2 through 7.6...

Security Bulletin: IBM i is affected by obtaining information without proper authority [CVE-2025-36371]

Summary IBM i is vulnerable to a user obtaining information in the database plan cache implementation without the proper authority CVE-2025-36371 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2025-36371 DESCRIPTION: IBM i is impacted by an obtaining informatio...