WID-SEC-W-2026-4571 - Vulnerability-Lookup

WID-SEC-W-2026-4571

Vulnerability from csaf_certbund - Published: 2026-11-12 23:00 - Updated: 2026-11-12 23:00

Summary

PostgreSQL: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: PostgreSQL ist eine frei verfügbare Datenbank für unterschiedliche Betriebssysteme.

Angriff: Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Betroffene Betriebssysteme: - Sonstiges - UNIX - Windows

CVE-2026-116303

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Open Source PostgreSQL <18.7 Open Source / PostgreSQL		<18.7
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
Open Source PostgreSQL <14.25 Open Source / PostgreSQL		<14.25
Open Source PostgreSQL <19 RC 2 Open Source / PostgreSQL		<19 RC 2
Open Source PostgreSQL <15.20 Open Source / PostgreSQL		<15.20
Open Source PostgreSQL <16.16 Open Source / PostgreSQL		<16.16
Open Source PostgreSQL <17.12 Open Source / PostgreSQL		<17.12

CVE-2026-116304

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116306

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116307

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116308

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116309

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116310

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116311

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116312

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116313

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116314

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116315

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116316

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116317

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116318

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116319

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116320

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116321

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116322

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116323

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116325

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116326

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116327

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116328

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116329

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116330

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116331

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116332

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116333

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116335

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-116336

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120139

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120141

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120142

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120143

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120144

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120145

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120146

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120147

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120148

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120149

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120150

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120151

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120152

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120153

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-120154

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-14661

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-16237

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-16240

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-18447

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-6460

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-6464

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

CVE-2026-6467

Affected products

Known affected 7 products, the same list as for CVE-2026-116303

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.postgresql.org/about/news/postgresql-…	external
https://lists.debian.org/debian-security-announce…	external

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "PostgreSQL ist eine frei verf\u00fcgbare Datenbank f\u00fcr unterschiedliche Betriebssysteme.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um beliebigen Code auszuf\u00fchren, Berechtigungen zu erweitern, Sicherheitsma\u00dfnahmen zu umgehen, SQL-Injection durchzuf\u00fchren, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-4571 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4571.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-4571 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4571"
      },
      {
        "category": "external",
        "summary": "PostgreSQL Release Notes vom 2026-11-12",
        "url": "https://www.postgresql.org/about/news/postgresql-187-1712-1616-1520-1425-and-19-rc-2-released-3442/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-6625 vom 2026-11-13",
        "url": "https://lists.debian.org/debian-security-announce/2026/msg00545.html"
      }
    ],
    "source_lang": "en-US",
    "title": "PostgreSQL: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-11-12T23:00:00.000+00:00",
      "generator": {
        "date": "2026-11-13T13:22:55.643+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.7.0"
        }
      },
      "id": "WID-SEC-W-2026-4571",
      "initial_release_date": "2026-11-12T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-11-12T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c18.7",
                "product": {
                  "name": "Open Source PostgreSQL \u003c18.7",
                  "product_id": "T063076"
                }
              },
              {
                "category": "product_version",
                "name": "18.7",
                "product": {
                  "name": "Open Source PostgreSQL 18.7",
                  "product_id": "T063076-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:postgresql:postgresql:18.7"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c16.16",
                "product": {
                  "name": "Open Source PostgreSQL \u003c16.16",
                  "product_id": "T063078"
                }
              },
              {
                "category": "product_version",
                "name": "16.16",
                "product": {
                  "name": "Open Source PostgreSQL 16.16",
                  "product_id": "T063078-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:postgresql:postgresql:16.16"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c17.12",
                "product": {
                  "name": "Open Source PostgreSQL \u003c17.12",
                  "product_id": "T063079"
                }
              },
              {
                "category": "product_version",
                "name": "17.12",
                "product": {
                  "name": "Open Source PostgreSQL 17.12",
                  "product_id": "T063079-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:postgresql:postgresql:17.12"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c15.20",
                "product": {
                  "name": "Open Source PostgreSQL \u003c15.20",
                  "product_id": "T063080"
                }
              },
              {
                "category": "product_version",
                "name": "15.2",
                "product": {
                  "name": "Open Source PostgreSQL 15.20",
                  "product_id": "T063080-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:postgresql:postgresql:15.20"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c14.25",
                "product": {
                  "name": "Open Source PostgreSQL \u003c14.25",
                  "product_id": "T063081"
                }
              },
              {
                "category": "product_version",
                "name": "14.25",
                "product": {
                  "name": "Open Source PostgreSQL 14.25",
                  "product_id": "T063081-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:postgresql:postgresql:14.25"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c19 RC 2",
                "product": {
                  "name": "Open Source PostgreSQL \u003c19 RC 2",
                  "product_id": "T063082"
                }
              },
              {
                "category": "product_version",
                "name": "19 RC 2",
                "product": {
                  "name": "Open Source PostgreSQL 19 RC 2",
                  "product_id": "T063082-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:postgresql:postgresql:19_rc_2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "PostgreSQL"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-116303",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116303"
    },
    {
      "cve": "CVE-2026-116304",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116304"
    },
    {
      "cve": "CVE-2026-116306",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116306"
    },
    {
      "cve": "CVE-2026-116307",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116307"
    },
    {
      "cve": "CVE-2026-116308",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116308"
    },
    {
      "cve": "CVE-2026-116309",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116309"
    },
    {
      "cve": "CVE-2026-116310",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116310"
    },
    {
      "cve": "CVE-2026-116311",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116311"
    },
    {
      "cve": "CVE-2026-116312",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116312"
    },
    {
      "cve": "CVE-2026-116313",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116313"
    },
    {
      "cve": "CVE-2026-116314",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116314"
    },
    {
      "cve": "CVE-2026-116315",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116315"
    },
    {
      "cve": "CVE-2026-116316",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116316"
    },
    {
      "cve": "CVE-2026-116317",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116317"
    },
    {
      "cve": "CVE-2026-116318",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116318"
    },
    {
      "cve": "CVE-2026-116319",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116319"
    },
    {
      "cve": "CVE-2026-116320",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116320"
    },
    {
      "cve": "CVE-2026-116321",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116321"
    },
    {
      "cve": "CVE-2026-116322",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116322"
    },
    {
      "cve": "CVE-2026-116323",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116323"
    },
    {
      "cve": "CVE-2026-116325",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116325"
    },
    {
      "cve": "CVE-2026-116326",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116326"
    },
    {
      "cve": "CVE-2026-116327",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116327"
    },
    {
      "cve": "CVE-2026-116328",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116328"
    },
    {
      "cve": "CVE-2026-116329",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116329"
    },
    {
      "cve": "CVE-2026-116330",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116330"
    },
    {
      "cve": "CVE-2026-116331",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116331"
    },
    {
      "cve": "CVE-2026-116332",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116332"
    },
    {
      "cve": "CVE-2026-116333",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116333"
    },
    {
      "cve": "CVE-2026-116335",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116335"
    },
    {
      "cve": "CVE-2026-116336",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-116336"
    },
    {
      "cve": "CVE-2026-120139",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120139"
    },
    {
      "cve": "CVE-2026-120141",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120141"
    },
    {
      "cve": "CVE-2026-120142",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120142"
    },
    {
      "cve": "CVE-2026-120143",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120143"
    },
    {
      "cve": "CVE-2026-120144",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120144"
    },
    {
      "cve": "CVE-2026-120145",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120145"
    },
    {
      "cve": "CVE-2026-120146",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120146"
    },
    {
      "cve": "CVE-2026-120147",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120147"
    },
    {
      "cve": "CVE-2026-120148",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120148"
    },
    {
      "cve": "CVE-2026-120149",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120149"
    },
    {
      "cve": "CVE-2026-120150",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120150"
    },
    {
      "cve": "CVE-2026-120151",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120151"
    },
    {
      "cve": "CVE-2026-120152",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120152"
    },
    {
      "cve": "CVE-2026-120153",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120153"
    },
    {
      "cve": "CVE-2026-120154",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-120154"
    },
    {
      "cve": "CVE-2026-14661",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-14661"
    },
    {
      "cve": "CVE-2026-16237",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-16237"
    },
    {
      "cve": "CVE-2026-16240",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-16240"
    },
    {
      "cve": "CVE-2026-18447",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-18447"
    },
    {
      "cve": "CVE-2026-6460",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-6460"
    },
    {
      "cve": "CVE-2026-6464",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-6464"
    },
    {
      "cve": "CVE-2026-6467",
      "product_status": {
        "known_affected": [
          "T063076",
          "2951",
          "T063081",
          "T063082",
          "T063080",
          "T063078",
          "T063079"
        ]
      },
      "release_date": "2026-11-12T23:00:00.000+00:00",
      "title": "CVE-2026-6467"
    }
  ]
}

CVE-2026-6460 (GCVE-0-2026-6460)

Vulnerability from cvelistv5 – Published: 2026-11-12 14:15 – Updated: 2026-11-13 05:02

Title

PostgreSQL type confusion after ALTER ... SET DATA TYPE executes arbitrary code

Summary

Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running the database, via ALTER ... SET DATA TYPE primarily. Other DDL attack routes exist, such as "ALTER TABLE ... ADD COLUMN; ROLLBACK; ALTER TABLE ... ADD COLUMN". The system had inadequate tracking of typed values, and values were not self-identifying. Stale values could appear in data dictionary entries, PL/pgSQL variables, and many other parts of the system. PostgreSQL Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-12 00:00 UTC

CWE

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Assigner

PostgreSQL CNA under the redhat root

CNA scorecard C 68/100 over 155 records in the last 180 days details

References

1 reference

URL	Tags
https://www.postgresql.org/support/security/CVE-2…

Impacted products

1 product

Vendor	Product	Version
n/a	PostgreSQL	Affected: 18 , < 18.7 (rpm) Affected: 17 , < 17.12 (rpm) Affected: 16 , < 16.16 (rpm) Affected: 15 , < 15.20 (rpm) Affected: 0 , < 14.25 (rpm)

Credits

The PostgreSQL project thanks Andrew Gierth, Alexander Lakhin, Francesco Verardi, Hcamael, Tomer Fichman, OpenAI Security Research Team, Mehmet Ince @mdisec, Bryan Green, Sumedh Pathak, Nicholas Carlini, Sergey Shinderuk, Yuxiao Guo, Nikhil Sontakke, Stephan Lipp, and Daniel Bakker for reporting this problem.

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6460",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-12T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-13T05:02:34.185Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "PostgreSQL",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "18.7",
              "status": "affected",
              "version": "18",
              "versionType": "rpm"
            },
            {
              "lessThan": "17.12",
              "status": "affected",
              "version": "17",
              "versionType": "rpm"
            },
            {
              "lessThan": "16.16",
              "status": "affected",
              "version": "16",
              "versionType": "rpm"
            },
            {
              "lessThan": "15.20",
              "status": "affected",
              "version": "15",
              "versionType": "rpm"
            },
            {
              "lessThan": "14.25",
              "status": "affected",
              "version": "0",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "attacker has permission to create objects (temporary objects or non-temporary objects in at least one schema)"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "The PostgreSQL project thanks Andrew Gierth, Alexander Lakhin, Francesco Verardi, Hcamael, Tomer Fichman, OpenAI Security Research Team, Mehmet Ince @mdisec, Bryan Green, Sumedh Pathak, Nicholas Carlini, Sergey Shinderuk, Yuxiao Guo, Nikhil Sontakke, Stephan Lipp, and Daniel Bakker for reporting this problem."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running the database, via ALTER ... SET DATA TYPE primarily.  Other DDL attack routes exist, such as \"ALTER TABLE ... ADD COLUMN; ROLLBACK; ALTER TABLE ... ADD COLUMN\".  The system had inadequate tracking of typed values, and values were not self-identifying.  Stale values could appear in data dictionary entries, PL/pgSQL variables, and many other parts of the system.  PostgreSQL Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-843",
              "description": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-12T14:15:32.415Z",
        "orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "shortName": "PostgreSQL"
      },
      "references": [
        {
          "url": "https://www.postgresql.org/support/security/CVE-2026-6460/"
        }
      ],
      "title": "PostgreSQL type confusion after ALTER ... SET DATA TYPE executes arbitrary code",
      "x_postgresql": {
        "component": "core server"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
    "assignerShortName": "PostgreSQL",
    "cveId": "CVE-2026-6460",
    "datePublished": "2026-11-12T14:15:32.415Z",
    "dateReserved": "2026-04-17T00:15:46.725Z",
    "dateUpdated": "2026-11-13T05:02:34.185Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-6464 (GCVE-0-2026-6464)

Vulnerability from cvelistv5 – Published: 2026-08-13 13:00 – Updated: 2026-08-29 23:07

Title

PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

Summary

Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the "COPY FROM STDIN" or "\copy FROM STDIN" command fails before the server indicates that it awaits input rows, psql processes the in-line data rows as psql commands. "COPY FROM" with a filename is unaffected. The server administrator has no inherent control over the data rows, so a complete attack requires the attacker to separately acquire control of both the server and the data rows. Alternatively, an attacker controlling data rows alone might complete an attack through a coincidental error that they don't control. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 00:00 UTC

CWE

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Assigner

PostgreSQL CNA under the redhat root

CNA scorecard C 68/100 over 155 records in the last 180 days details

References

1 reference

URL	Tags
https://www.postgresql.org/support/security/CVE-2…

Impacted products

1 product

Vendor	Product	Version
n/a	PostgreSQL	Affected: 18 , < 18.6 (rpm) Affected: 17 , < 17.11 (rpm) Affected: 16 , < 16.15 (rpm) Affected: 15 , < 15.19 (rpm) Affected: 0 , < 14.24 (rpm)

Credits

The PostgreSQL project thanks Alexander Lakhin for reporting this problem.

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6464",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T03:55:30.751Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "PostgreSQL",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "18.6",
              "status": "affected",
              "version": "18",
              "versionType": "rpm"
            },
            {
              "lessThan": "17.11",
              "status": "affected",
              "version": "17",
              "versionType": "rpm"
            },
            {
              "lessThan": "16.15",
              "status": "affected",
              "version": "16",
              "versionType": "rpm"
            },
            {
              "lessThan": "15.19",
              "status": "affected",
              "version": "15",
              "versionType": "rpm"
            },
            {
              "lessThan": "14.24",
              "status": "affected",
              "version": "0",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "psql input uses \"COPY FROM STDIN\" or \"\\copy FROM STDIN\""
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "The PostgreSQL project thanks Alexander Lakhin for reporting this problem."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection.  If the \"COPY FROM STDIN\" or \"\\copy FROM STDIN\" command fails before the server indicates that it awaits input rows, psql processes the in-line data rows as psql commands.  \"COPY FROM\" with a filename is unaffected.  The server administrator has no inherent control over the data rows, so a complete attack requires the attacker to separately acquire control of both the server and the data rows.  Alternatively, an attacker controlling data rows alone might complete an attack through a coincidental error that they don\u0027t control.  Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-829",
              "description": "Inclusion of Functionality from Untrusted Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-29T23:07:34.365Z",
        "orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "shortName": "PostgreSQL"
      },
      "references": [
        {
          "url": "https://www.postgresql.org/support/security/CVE-2026-6464/"
        }
      ],
      "title": "PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands",
      "x_postgresql": {
        "component": "client"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
    "assignerShortName": "PostgreSQL",
    "cveId": "CVE-2026-6464",
    "datePublished": "2026-08-13T13:00:16.158Z",
    "dateReserved": "2026-04-17T00:19:12.645Z",
    "dateUpdated": "2026-08-29T23:07:34.365Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-6467 (GCVE-0-2026-6467)

Vulnerability from cvelistv5 – Published: 2026-11-12 14:15 – Updated: 2026-11-13 05:02

Title

PostgreSQL extension script schema mishandling executes arbitrary SQL

Summary

Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via ALTER SCHEMA ... RENAME or CREATE EXTENSION ... SCHEMA "$user". ALTER EXTENSION was also affected. A trusted-extension script located the wrong object and executed arbitrary SQL of the attacker's choice. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-12 00:00 UTC

CWE

CWE-427 - Uncontrolled Search Path Element

Assigner

PostgreSQL CNA under the redhat root

CNA scorecard C 68/100 over 155 records in the last 180 days details

References

1 reference

URL	Tags
https://www.postgresql.org/support/security/CVE-2…

Impacted products

1 product

Vendor	Product	Version
n/a	PostgreSQL	Affected: 18 , < 18.7 (rpm) Affected: 17 , < 17.12 (rpm) Affected: 16 , < 16.16 (rpm) Affected: 15 , < 15.20 (rpm) Affected: 0 , < 14.25 (rpm)

Credits

The PostgreSQL project thanks Noah Misch for reporting this problem.

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6467",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-12T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-13T05:02:33.028Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "PostgreSQL",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "18.7",
              "status": "affected",
              "version": "18",
              "versionType": "rpm"
            },
            {
              "lessThan": "17.12",
              "status": "affected",
              "version": "17",
              "versionType": "rpm"
            },
            {
              "lessThan": "16.16",
              "status": "affected",
              "version": "16",
              "versionType": "rpm"
            },
            {
              "lessThan": "15.20",
              "status": "affected",
              "version": "15",
              "versionType": "rpm"
            },
            {
              "lessThan": "14.25",
              "status": "affected",
              "version": "0",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "attacker has database-level CREATE privilege"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "The PostgreSQL project thanks Noah Misch for reporting this problem."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Uncontrolled search path element in PostgreSQL CREATE EXTENSION allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser, via ALTER SCHEMA ... RENAME or CREATE EXTENSION ... SCHEMA \"$user\".  ALTER EXTENSION was also affected.  A trusted-extension script located the wrong object and executed arbitrary SQL of the attacker\u0027s choice.  Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "Uncontrolled Search Path Element",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-12T14:15:32.994Z",
        "orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
        "shortName": "PostgreSQL"
      },
      "references": [
        {
          "url": "https://www.postgresql.org/support/security/CVE-2026-6467/"
        }
      ],
      "title": "PostgreSQL extension script schema mishandling executes arbitrary SQL",
      "x_postgresql": {
        "component": "core server"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
    "assignerShortName": "PostgreSQL",
    "cveId": "CVE-2026-6467",
    "datePublished": "2026-11-12T14:15:32.994Z",
    "dateReserved": "2026-04-17T00:20:56.212Z",
    "dateUpdated": "2026-11-13T05:02:33.028Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.