Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PostgreSQL 18.6 Clear all filters
TI-2026-13578 CVE-2026-16238 · GHSA-6q3v-qqc9-g2rv

PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code

Priority MEDIUM 40

Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00414 Published 2026-08-13 Fixed in 18.6 CWE-843
TI-2026-12368 CVE-2026-14676 · GHSA-8848-x36c-v99q

PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code

Priority MEDIUM 40

Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00436 Published 2026-08-13 Fixed in 18.6 CWE-122