Red Hat Security Advisory: postgresql18 security update
PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es): * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser (CVE-2026-6476) * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats() (CVE-2026-16238) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow (CVE-2026-14676) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
This Red Hat security advisory for PostgreSQL fixes numerous vulnerabilities that enable arbitrary code execution, SQL injection, privilege escalation, heap buffer overflows, and information disclosure. Key vulnerabilities include SQL injection in pg_createsubscriber (CVE-2026-6476), arbitrary command execution via untrusted data in COPY FROM STDIN in psql (CVE-2026-6464), and multiple arbitrary code execution flaws via integer wraparound, type confusion, and buffer overflows in various PostgreSQL components. The advisory covers fixes for Red Hat Enterprise Linux 10 and related architectures and builder variants. The vulnerabilities collectively pose a high security risk due to the potential for superuser-level code execution and privilege escalation.
Potential Impact
Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary SQL commands as superuser, run arbitrary code on the database server, escalate privileges, or disclose sensitive information. This could lead to full compromise of the PostgreSQL database server and potentially the underlying host system. The vulnerabilities affect both client and server components and various PostgreSQL extensions and plugins.
Mitigation Recommendations
Red Hat has released an official security update for postgresql18 on Red Hat Enterprise Linux 10 and related products that addresses these vulnerabilities. Users should apply the update as soon as possible following Red Hat's guidance at https://access.redhat.com/articles/11258. No additional mitigations are specified beyond applying the official patch. Patch status is confirmed as fixed in the updated packages provided by Red Hat.
Red Hat Security Advisory: postgresql18 security update
Description
PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine as the PostgreSQL server, or on a remote machine that accesses a PostgreSQL server over a network connection. The PostgreSQL server can be found in the postgresql-server sub-package. Security Fix(es): * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser (CVE-2026-6476) * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662) * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408) * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464) * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471) * postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680) * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664) * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677) * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239) * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats() (CVE-2026-16238) * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679) * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671) * postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow (CVE-2026-14676) * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670) * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668) * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385) * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat security advisory for PostgreSQL fixes numerous vulnerabilities that enable arbitrary code execution, SQL injection, privilege escalation, heap buffer overflows, and information disclosure. Key vulnerabilities include SQL injection in pg_createsubscriber (CVE-2026-6476), arbitrary command execution via untrusted data in COPY FROM STDIN in psql (CVE-2026-6464), and multiple arbitrary code execution flaws via integer wraparound, type confusion, and buffer overflows in various PostgreSQL components. The advisory covers fixes for Red Hat Enterprise Linux 10 and related architectures and builder variants. The vulnerabilities collectively pose a high security risk due to the potential for superuser-level code execution and privilege escalation.
Potential Impact
Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary SQL commands as superuser, run arbitrary code on the database server, escalate privileges, or disclose sensitive information. This could lead to full compromise of the PostgreSQL database server and potentially the underlying host system. The vulnerabilities affect both client and server components and various PostgreSQL extensions and plugins.
Mitigation Recommendations
Red Hat has released an official security update for postgresql18 on Red Hat Enterprise Linux 10 and related products that addresses these vulnerabilities. Users should apply the update as soon as possible following Red Hat's guidance at https://access.redhat.com/articles/11258. No additional mitigations are specified beyond applying the official patch. Patch status is confirmed as fixed in the updated packages provided by Red Hat.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:67280
- Cve Count
- 19
- Additional Cves
- ["CVE-2026-6471","CVE-2026-6476","CVE-2026-14662","CVE-2026-14664","CVE-2026-14668","CVE-2026-14669","CVE-2026-14670","CVE-2026-14671","CVE-2026-14676","CVE-2026-14677","CVE-2026-14679","CVE-2026-14680","CVE-2026-15741","CVE-2026-15742","CVE-2026-16238","CVE-2026-16239","CVE-2026-18408","CVE-2026-19385"]
- State
- PUBLISHED
Threat ID: 6aa8a16c55bf5e2cf5f3b86f
Added to database: 09/15/2026, 01:37:48 UTC
Last enriched: 09/15/2026, 01:43:43 UTC
Last updated: 09/15/2026, 01:45:45 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.