Beveiligingsadvies

CVE-2026-2006

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-12 13:00:10

Laatst bijgewerkt 2026-07-15 01:20:50

Toegewezen door PostgreSQL

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

← Alle CVE's bekijken Bekijk op cve.org ↗