Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 21:59:44 +0000 CVE-2026-16239 — PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code https://db.gcve.eu/vuln/cve-2026-16239 <p><strong>Affected:</strong> PostgreSQL</p> <p>Type confusion in PostgreSQL &#34;portal&#34;/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.</p> <p><strong>Affected:</strong> PostgreSQL</p> <p>Type confusion in PostgreSQL &#34;portal&#34;/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.</p> https://db.gcve.eu/vuln/cve-2026-16239