TI-2026-54356 CVE-2026-78155 · GHSA-gf36-c938-gjrw
Untrusted Search Path in StackGres
Priority MEDIUM 43
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges
ongres
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
ongres records in CISA KEVNo ongres vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2025-36984 CVE-2025-59432 · GHSA-3wfh-36rx-9537
Timing Attack Vulnerability in SCRAM Authentication
Priority LOW 36
SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms.
TI-2026-38732 CVE-2026-53712 · GHSA-p9jg-fcr6-3mhf
SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms
Priority LOW 35
SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms.