Security fixes in postgres-operator-fips 1.15.1-r0 (CVE-2026-27139)
Affects postgres-operator-fipsSource GCVE Database
Not known to be exploited · CVSS 2.5 Low · fixed in 1.15.1-r0 : update postgres-operator-fips when convenient.
Data as of 10/25/2026, 04:40:12 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 1.15.1-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartpostgres-operator-fips | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade to postgres-operator-fips version 1.15.1-r0, which contains fixes for CVE-2026-27139 and other vulnerabilities. Since a patch is available, applying this update is the recommended remediation. No additional mitigation guidance is provided.
Description
The postgres-operator-fips package version 1.15.1-r0 addresses three security vulnerabilities including CVE-2026-27139. A patch is available in this version to fix these issues. There is no CVSS score provided for CVE-2026-27139, and no known exploits in the wild have been reported. The vulnerabilities affect the postgres-operator-fips product and are fixed in version 1.15.1-r0.
Impact
The vulnerabilities fixed in version 1.15.1-r0 could potentially affect the security of systems running earlier versions of postgres-operator-fips. Without detailed technical information or CVSS scoring, the precise impact is unclear. However, the availability of a patch indicates that these issues could pose a security risk if unpatched.