Threats Tagged 'cve-2026-14663'
View all threats tagged with 'cve-2026-14663'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-14663'
Click on any threat for detailed analysis and mitigation recommendations
Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. (CVE-2026-14663)CVE-2026-14663 0 A vulnerability in PostgreSQL's pgcrypto module allows recovery of cleartext data due to disabled ciphers in OpenSSL. This flaw causes decryption to succeed even with incorrect keys, bypassing the Modification Detection Code (MDC) protection. Affected functions include various symmetric and public encryption/decryption calls. Versions prior to PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are impacted. The vulnerability has a medium severity with a CVSS score of 6.5. Join the discussion | GCVE Database | 08/13/2026, 15:34:34 UTC Added: 08/13/2026, 17:48:24 UTC |
CVE-2026-14663: Cleartext Storage in a File or on Disk in PostgreSQLCVE-2026-14663 0 Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed even with the wrong key. This in turn loses the modest protection from the Modification Detection Code (MDC). Affected functions are pgp_sym_encrypt, pgp_sym_decrypt, pgp_pub_encrypt, pgp_pub_decrypt, pgp_sym_encrypt_bytea, pgp_sym_decrypt_bytea, pgp_pub_encrypt_bytea, and pgp_pub_decrypt_bytea. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected. Join the discussion | CVE Database V5 | 08/13/2026, 13:00:02 UTC Added: 08/13/2026, 13:26:45 UTC |
Showing 1 to 2 of 2 results