https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 20:09:57 +0000 https://db.gcve.eu/vuln/cve-2026-6467 <p><strong>Affected:</strong> PostgreSQL</p> <p>Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via ALTER SCHEMA ... RENAME or CREATE EXTENSION ... SCHEMA &#34;$user&#34;. ALTER EXTENSION was also affected. A trusted-extension script located the wrong object and executed arbitrary SQL of the attacker&#39;s choice. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.</p> <p><strong>Affected:</strong> PostgreSQL</p> <p>Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via ALTER SCHEMA ... RENAME or CREATE EXTENSION ... SCHEMA &#34;$user&#34;. ALTER EXTENSION was also affected. A trusted-extension script located the wrong object and executed arbitrary SQL of the attacker&#39;s choice. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.</p> https://db.gcve.eu/vuln/cve-2026-6467