Search: CVE-2026-14681

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.2	EPSS <0.1%	CVE-2026-14681PostgreSQL · Improper Enforcement of Message Integrity During Transmission in a Communication Channel Medium4.2EPSS <0.1%2026-08-13CVE Database V5CVE-2026-14681 CVE-2026-14681 is a vulnerability in PostgreSQL's GSSAPI support where message integrity enforcement during transmission is improper. This allows a user to negotiate GSSAPI authentication contrary to the pg_hba.conf configuration via an initial direct TLS connection. If TLS settings are more permissive than GSSAPI settings, the connection may proceed with weaker protection. The issue affects PostgreSQL major versions 17 and 18, specifically versions before 17.11 and 18.6. Versions before 17 are not affected. EPSS <0.1%Vulnerability	CVE Database V5	2026-08-13

Page 1 of 1 · 1 duplicate CVE record merged