Threats Tagged 'cve-2026-6476'

CVE-2026-6476 is a high-severity SQL injection vulnerability in PostgreSQL affecting versions 17 and 18 prior to 17.10 and 18.4, respectively. It allows an attacker with pg_create_subscription rights to execute arbitrary SQL commands with superuser privileges when the pg_createsubscriber function runs. Versions before PostgreSQL 17 are not affected. There is no confirmed patch or official remediation information available at this time.

Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applications that pass gigabyte-scale user inputs to the relevant database functions, the application input provider may achieve a segmentation fault. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.