PostgreSQL

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenSep 3, 2026
Last mentionedSep 18, 2026

Timeline

4 articles · newest first

Critical pgAdmin Authentication Bypass Lets Attackers Login as Administrator Without Credentials

pgAdmin 4 versions 6.2-9.17 contain critical auth bypass CVE-2026-86863 (CVSS 9.8) letting unauthenticated attackers impersonate administrators; fixed in 9.18.

GBHackersSep 18, 09:31 UTC · Sep 18, 2026VulnerabilityCVE-2026-868632 · 1 read

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

PostgreSQL fixed CVE-2026-6471 (CVSS 7.2), a 12-year-old logical decoding flaw letting replication-role accounts execute arbitrary code as the database OS user.

The Hacker NewsSep 4, 15:20 UTC · Sep 4, 2026VulnerabilityCVE-2026-64712 · 1 read

PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover

PostgreSQL flaw CVE-2026-6471, present since 2014, lets low-privilege replication accounts execute code and take over database servers; patches released.

Security AffairsSep 4, 13:41 UTC · Sep 4, 2026VulnerabilityCVE-2026-64713 · 1 read

Decade-old PostgreSQL flaw turns backup account into a backdoor

Cyera disclosed CVE-2026-6471, a decade-old PostgreSQL flaw letting REPLICATION-attribute accounts achieve RCE and superuser compromise, patched August 13.

CSO OnlineSep 3, 11:38 UTC · Sep 3, 2026VulnerabilityCVE-2026-64713 · 1 read

Related CVEs

by mentions

CVE-2026-6471<1%7.2
Missing Authorization in PostgreSQL Logical Decoding Lets REPLICATION Role Run Code
published Aug 13, 2026PostgreSQL
CVE-2026-868639.3
Authentication Bypass via Client-Supplied Header Spoofing in pgAdmin 4
published Sep 17, 2026pgAdmin Project (PostgreSQL) pgAdmin 4

Appears with

PostgreSQLproduct · 3
PostgreSQLorganization · 2
Cyeraorganization · 2
Cyeravendor · 2
pgAdmin 4product · 1
EDB (EnterpriseDB)organization · 1
pgAdminvendor · 1

Entities are extracted by the model from each article. First seen Sep 3, 2026, last mentioned Sep 18, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.