CVE-2026-120062

The psqlODBC driver is vulnerable to SQL injection in versions prior to 18.00.0006 . The SQLSpecialColumns function fails to escape table and schema names when splicing them into catalog queries, unlike other catalog functions. This allows an attacker providing untrusted names to execute arbitrar...