Skip to content
Critical Vulnerabilities in PostgreSQL 18 and 16 Require Immediate Attention

Critical Vulnerabilities in PostgreSQL 18 and 16 Require Immediate Attention

First seen 12 Mar 2026, 21:15 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 13, 2026 at 20:57 UTC

On March 12, 2026, updates for PostgreSQL versions 16 and 18 were released, addressing multiple critical vulnerabilities. Key issues include CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006, and CVE-2026-2007, all published on February 12, 2026. These vulnerabilities could lead to arbitrary code execution and memory disclosure, affecting server security. Users of openSUSE and SUSE Linux Enterprise are particularly at risk and are advised to apply the patches immediately. The updates also include regression fixes for issues related to the substring() function and multibyte character handling. The vulnerabilities are significant, with CVE-2026-2004, CVE-2026-2005, and CVE-2026-2006 rated 8.8 on the CVSS scale, indicating high severity. The current status is that patches are available, and users are urged to update their systems promptly.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 208d ago How this analysis works

Timeline

2026-02-12
CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006, CVE-2026-2007 published
2026-03-12
Updates for PostgreSQL 16 and 18 released to address vulnerabilities

More articles in this cluster (3)

Following this threat?

Track OpenSUSE and CVE-2026-2003 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 2