CVE-2026-6478

PostgreSQL is vulnerable to a covert timing channel during the comparison of MD5-hashed passwords in the authentication process. This flaw allows an attacker to recover user credentials, providing sufficient information to authenticate. This vulnerability specifically impacts databases containing...