https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T21:59:44.013441+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-16239 CVE-2026-16239 — PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code 2026-09-30T21:59:44.015387+00:00

Affected: PostgreSQL

Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.