CERT24PostgreSQL update fixes 52 flaws, including 22-year-old bug enabling authenticated RCELoading data…
CERT24Threat Observatory
Period

PostgreSQL update fixes 52 flaws, including 22-year-old bug enabling authenticated RCE

New PostgreSQL releases fix 52 security flaws. One of them, type confusion flaw CVE-2026-6460, may allow a database user who can create objects to run code on the server. The sources state that no attacks using the flaw have been reported, and CISA's CVE assessment lists exploitation as none.

← Back to intelligence

PostgreSQL update fixes 52 flaws, including 22-year-old bug enabling authenticated RCE

New PostgreSQL releases fix 52 security flaws. One of them, type confusion flaw CVE-2026-6460, may allow a database user who can create objects to run code on the server. The sources state that no attacks using the flaw have been reported, and CISA's CVE assessment lists exploitation as none.