20-Year

Gbhackers •Divya • May 19, 2026

A newly released proof-of-concept (PoC) exploit for CVE-2026-2005 has brought renewed attention to a critical vulnerability in PostgreSQL’s pgcrypto extension, exposing systems to remote code execution (RCE). Security researchers warn that the flaw, rooted in legacy code paths dating back nearly two decades, could allow attackers to escalate privileges and execute arbitrary commands on affected […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical PostgreSQL Vulnerabilities Enable Remote Code Execution and SQL Injection PostgreSQL has released security updates addressing multiple high-risk vulnerabilities that could lead to remote code execution (RCE) and SQL injection attacks. The updates, available in versions 18.4, 17.10, 16.14, 15.18, and 14.23, fix eleven vulnerabilities, including CVE-2026-6473, CVE-2026-6475, and CVE-2026-6637, all rated CVSS 8.8. Attackers could exploit these flaws to execute arbitrary code, overwrite local files, and inject SQL commands. The vulnerabilities affect widely deployed PostgreSQL database environments. IT managers are urged to apply the updates promptly to mitigate risks. Additionally, over 60 bugs have been resolved in these updates. The vulnerabilities were disclosed on May 14, 2026, and are considered critical due to their potential impact on database security. 19 sources 72

Extracted Entities

20-Year

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)