Snowflake Postgres role chain reached OS command execution, now fixed
Varonis chained CREATEROLE, pg_cron, and archive_command in its own test tenant; Snowflake patched before publication.
62
Product
PostgreSQL
- Mentions · 7d0
- Mentions · 30d6
- All mentions12
- First seenSep 1, 2026
- Last mentioned11d ago
Timeline
12 articles · newest firstPg_vectorsearch: An index that is faster than pgvector's IVFFlat and HNSW
Timescale's pg_vectorsearch claims a PostgreSQL vector index faster than pgvector IVFFlat and HNSW.
24
Update modules/auxiliary/scanner/postgres/postgres_login.rb
Rapid7 updated Metasploit's PostgreSQL login scanner module, with no vulnerability details disclosed.
14
Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks
Gentlemen ransomware affiliate Azazel used Model Context Protocol as live command-and-control across victims in six countries.
78
Researchers Find 543,699 Active Credentials Leaked in Public GitHub Repos
Truffle Security verified 543,699 credentials still active after exposure in public GitHub repositories.
78
Over 543,000 GitHub Credentials Remain Active After Being Publicly Exposed
Truffle Security found 543,699 still-valid credentials exposed in public GitHub code.
78
Epistemic Typing as a PostgreSQL Table Access Method: Adversarial Conflict Resolution Under Confidence Forgery and Sybil Coordination
KNDB, a PostgreSQL 18 access method, resists confidence forgery and Sybil writes using engine-assigned epistemic types.
30
Misconfigured Supabase apps expose data in over 16,000 databases
UpGuard found over 16,000 misconfigured Supabase databases exposing PII, passwords, tokens, and some payment data.
78
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL fixed CVE-2026-6471 (CVSS 7.2), a 12-year-old logical decoding flaw letting replication-role accounts execute arbitrary code as the database OS user.
60
PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover
PostgreSQL flaw CVE-2026-6471, present since 2014, lets low-privilege replication accounts execute code and take over database servers; patches released.
68
Decade-old PostgreSQL flaw turns backup account into a backdoor
Cyera disclosed CVE-2026-6471, a decade-old PostgreSQL flaw letting REPLICATION-attribute accounts achieve RCE and superuser compromise, patched August 13.
65
CVE-2026-9586 | Sangoma Switchvox Unauthenticated SQL Injection Remote Code Execution Vulnerability
CVE-2026-9586, a critical unauthenticated SQL injection to RCE in Sangoma Switchvox, is being actively exploited against internet-facing systems per honeypot observations.
64
Related CVEs
by mentions- CVE-2026-6471<1%7.2Missing Authorization in PostgreSQL Logical Decoding Lets REPLICATION Role Run Code
- CVE-2026-958619%9.3Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
Appears with
- PostgreSQLvendor · 3
- Googlevendor · 2
- Cyeravendor · 2
- Geminiai model · 2
- Truffle Securityorganization · 2
- GitHubproduct · 2
- GitHubvendor · 2
- Cyeraorganization · 2
- GitHuborganization · 2
- MongoDBvendor · 2
- PostgreSQLorganization · 2
- MySQLproduct · 2
- MongoDBproduct · 2
- KNDBproduct · 1
- The Stack v3product · 1
- Snowflakevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.