Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: PgBouncer 1.26.1 Clear all filters
TI-2026-74364 CVE-2026-107350

PgBouncer authentication bypass lets attackers log in as other users

Priority MEDIUM 40

Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authenticates using SCRAM, including PgBouncer adm…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00369 Published 2026-10-14 Fixed in 1.26.1 CWE-287
TI-2026-74362 CVE-2026-107348

Integer overflow in PgBouncer buffer growth causes infinite loop

Priority LOW 27

Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_packet_size is configured above 2147483648.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00392 Published 2026-10-14 Fixed in 1.26.1 CWE-190