Search: CVE-2026-6474

CVE-2026-6474 is a medium severity vulnerability in PostgreSQL affecting versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23. It involves an externally-controlled format string in the timeofday() function that allows an attacker to retrieve portions of server memory by using crafted timezone zones. The vulnerability has a CVSS score of 4.3 and does not require user interaction but does require low privileges. No known exploits are reported in the wild.