1 matches found
AZL-95705 CVE-2026-18408 affecting package postgresql 16.14-1
Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \restrict meta-command input expansion. The fix for CVE-2025-871...
8.8CVSS7.5AI score0.00363EPSS
SaveExploits0References1
20