https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T20:07:44.759951+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1530 certfr-2026-avi-1530 — De multiples vulnérabilités ont été découvertes dans PostgreSQL. Certaines d'entre elles permettent à un attaquant de p… 2026-11-14T20:07:44.770709+00:00 certfr-2026-avi-1530 https://db.gcve.eu/vuln/fkie_cve-2026-116329 fkie_cve-2026-116329 2026-11-14T20:07:44.770785+00:00

Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.

 https://db.gcve.eu/vuln/ghsa-vrcm-258p-8vpg GHSA-vrcm-258p-8vpg 2026-11-14T20:07:44.770841+00:00

Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.

 https://db.gcve.eu/vuln/msrc_cve-2026-116329 msrc_CVE-2026-116329 — PostgreSQL statistics import type confusion executes arbitrary code 2026-11-14T20:07:44.770871+00:00 msrc_CVE-2026-116329 https://db.gcve.eu/vuln/rhsa-2026:80584 RHSA-2026:80584 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-11-14T20:07:44.770900+00:00

postgresql: postgresql: Privilege escalation via untrusted search path in vacuumdb postgresql: postgresql: Arbitrary SQL execution via improper constraint quoting in pg_dump postgresql: postgresql: Denial of Service via improper locking during startup processing postgresql: postgresql: arbitrary code execution via nested SET DATA TYPE during statistics import postgresql: PostgreSQL: Arbitrary code execution via incomplete type-cache invalidation

 https://db.gcve.eu/vuln/ubuntu-cve-2026-116329 UBUNTU-CVE-2026-116329 2026-11-14T20:07:44.770944+00:00

Affected: Ubuntu:Pro:14.04:LTS: postgresql-9.3, Ubuntu:Pro:16.04:LTS: postgresql-9.5, Ubuntu:Pro:18.04:LTS: postgresql-10, Ubuntu:20.04:LTS: postgresql-12, Ubuntu:22.04:LTS: postgresql-14, Ubuntu:24.04:LTS: postgresql-16, Ubuntu:26.10: postgresql-18, Ubuntu:26.04:LTS: postgresql-18

Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4571 WID-SEC-W-2026-4571 — PostgreSQL: Mehrere Schwachstellen 2026-11-14T20:07:44.771004+00:00

Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.