Search: CVE-2026-14663

CVE-2026-14663 is a vulnerability in PostgreSQL's pgcrypto module where cleartext data can be recovered due to disabled ciphers in OpenSSL. This flaw affects multiple encryption and decryption functions, allowing decryption to succeed even with incorrect keys, thereby bypassing the Modification Detection Code (MDC) protection. Versions prior to PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected. The vulnerability has a medium severity with a CVSS score of 6.5.