https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 13:31:54 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-107350 <p>Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM authentication against a non-existent database is not rejected and switches the user being logged in as, while the SCRAM exchange is still verified against the keys of the first user.</p> <p>Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM authentication against a non-existent database is not rejected and switches the user being logged in as, while the SCRAM exchange is still verified against the keys of the first user.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107350 https://db.gcve.eu/vuln/ghsa-qcxp-3cx5-3f3g <p>Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM authentication against a non-existent database is not rejected and switches the user being logged in as, while the SCRAM exchange is still verified against the keys of the first user.</p> <p>Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM authentication against a non-existent database is not rejected and switches the user being logged in as, while the SCRAM exchange is still verified against the keys of the first user.</p> https://db.gcve.eu/vuln/ghsa-qcxp-3cx5-3f3g https://db.gcve.eu/vuln/msrc_cve-2026-107350 msrc_CVE-2026-107350 https://db.gcve.eu/vuln/msrc_cve-2026-107350 https://db.gcve.eu/vuln/rhsa-2026:83843 <p>pgbouncer: pgbouncer: Denial of Service via integer overflow in message buffer growth pgbouncer: pgbouncer: Denial of Service via empty parameter name in startup options pgbouncer: pgbouncer: Privilege escalation via secondary startup message during SCRAM authentication</p> <p>pgbouncer: pgbouncer: Denial of Service via integer overflow in message buffer growth pgbouncer: pgbouncer: Denial of Service via empty parameter name in startup options pgbouncer: pgbouncer: Privilege escalation via secondary startup message during SCRAM authentication</p> https://db.gcve.eu/vuln/rhsa-2026:83843 https://db.gcve.eu/vuln/ubuntu-cve-2026-107350 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer, Ubuntu:24.04:LTS: pgbouncer, Ubuntu:26.10: pgbouncer, Ubuntu:26.04:LTS: pgbouncer</p> <p>Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM authentication against a non-existent database is not rejected and switches the user being logged in as, while the SCRAM exchange is still verified against the keys of the first user.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer, Ubuntu:24.04:LTS: pgbouncer, Ubuntu:26.10: pgbouncer, Ubuntu:26.04:LTS: pgbouncer</p> <p>Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer admin users and backend superusers. A second StartupMessage sent during SCRAM authentication against a non-existent database is not rejected and switches the user being logged in as, while the SCRAM exchange is still verified against the keys of the first user.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-107350