Search: CVE-2026-6479

CVE-2026-6479 is a high-severity vulnerability in PostgreSQL affecting versions prior to 18.4, 17.10, 16.14, 15.18, and 14.23. It involves uncontrolled recursion during SSL and GSS negotiation, which can be exploited by an attacker with access to a PostgreSQL AF_UNIX socket to cause a sustained denial of service. If SSL and GSS are disabled, the vulnerability can also be triggered via a PostgreSQL TCP socket. There is no confirmed patch or official remediation guidance available at this time.