Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1395 matches found

NVD
NVD•added 2026/09/04 9:17 p.m.•11 views

CVE-2026-85787

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user...

7.1CVSS0.00342EPSS
SaveExploits0References2
EUVD
EUVD•added 2026/09/04 8:03 p.m.•19 views

EUVD-2026-71748

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user...

7.1CVSS5.6AI score0.00342EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/09/04 8:03 p.m.•39 views

CVE-2026-85787 An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user...

7.1CVSS0.00342EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/09/04 8:03 p.m.•10 views

CVE-2026-85787 An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user...

7.1CVSS5.9AI score0.00342EPSS
SaveExploits0References2
CVE
CVE•added 2026/09/04 8:03 p.m.•56 views

CVE-2026-85787

CVE-2026-85787 affects the SQL validation component of Amazon awslabs postgres-mcp-server (versions before 1.1.7 ). Due to an incomplete list of disallowed inputs , an unauthenticated actor can place crafted SQL into content submitted when an authenticated user interacts with the MCP server, enab...

7.1CVSS5.9AI score0.00342EPSS
SaveExploits0References2
NVD
NVD•added 2026/09/04 3:17 p.m.•19 views

CVE-2026-85620

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS0.00506EPSS
SaveExploits0References4
EUVD
EUVD•added 2026/09/04 2:32 p.m.•18 views

EUVD-2026-71227

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS5.6AI score0.00506EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2026/09/04 2:32 p.m.•53 views

CVE-2026-85620 Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS0.00506EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2026/09/04 2:32 p.m.•11 views

CVE-2026-85620 Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS6.2AI score0.00506EPSS
SaveExploits0References4
CVE
CVE•added 2026/09/04 2:32 p.m.•73 views

CVE-2026-85620

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass in its SQL validation layer. The root cause is that function-name validation is not applied to RangeFunction nodes in FROM clauses , allowing attackers to invoke file-reading functions such as pg_read_file via FROM-clause syntax and read ar...

9.2CVSS6.2AI score0.00506EPSS
SaveExploits0References4
OSV
OSV•added 2026/09/04 2:32 p.m.•23 views

CVE-2026-85620 Postgres MCP Pro 0.3.0 Restricted-Mode Bypass via FROM-Clause Function

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS5.8AI score
SaveExploits0References6
Positive Technologies
Positive Technologies•added 2026/09/04 12:00 a.m.•24 views

PT-2026-86254

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user...

7.1CVSS5.6AI score0.00342EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/04 12:00 a.m.•2 views

CVE-2026-85620: Incorrect Authorization

Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where function-name validation is not applied to RangeFunction nodes in FROM clauses. Attackers can execute file-reading functions like pgreadfile through FROM-clause syntax to read arbitrary files despite restricted-mode...

9.2CVSS6AI score0.00506EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/04 12:00 a.m.•3 views

CVE-2026-85787: Incomplete List of Disallowed Inputs

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user...

7.1CVSS5.9AI score0.00342EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/09/04 12:00 a.m.•25 views

PT-2026-85544

Name of the Vulnerable Software and Affected Versions Postgres MCP Pro version 0.3.0 Description A restricted-mode bypass exists where function-name validation is not applied to RangeFunction nodes within FROM clauses. This allows attackers to bypass the allowlist and execute file-reading...

9.2CVSS6.1AI score0.00506EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus•added 2026/09/02 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-80220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - prometheus-postgres-exporter - None Ubuntu Linux - Unknown description CVE-2026-80220 Note that Nessus relies on the presence of the package as...

5.8AI score
SaveExploits0References3
OSV
OSV•added 2026/09/01 11:17 a.m.•10 views

CLEANSTART-2026-VJ20703 Security fixes in postgres-operator 1.15.1-r1

Package postgres-operator version 1.15.1-r1 fixes 24 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

10CVSS6.6AI score0.00787EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies•added 2026/08/30 12:00 a.m.•18 views

PT-2026-83585

Summary Unchecked Return Value vulnerability in ash-project ash postgres allows a user who can drive a tenant rename to a name that collides with an existing tenant's schema to have their tenant record repointed at that other tenant's live schema, gaining access to its data...

7.2CVSS5.9AI score0.0016EPSS
SaveExploits0References6
Wolfi
Wolfi•added 2026/08/26 2:16 a.m.•22 views

GHSA-5X78-73V4-XG6W vulnerabilities

Vulnerabilities for packages: pgcat...

5.2AI score
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/08/24 7:49 p.m.•19 views

actix-postgres (>=0.1.0, <=0.4.0), actyxos_data_flow (0.1.0) +503 more potentially affected by unknown CVE via tokio-postgres (>=0.4.0-rc.2, <=0.7.17)

tokio-postgres CARGO version =0.4.0-rc.2, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.4.0, =0.1.1, =0.4.0, =0.3.5, =0.2.0, =0.13.2, =0.14.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3GJW-F78C-VVPW...

5.7AI score
SaveExploits0
Rows per page
Query Builder