Linuxsecurity Critical Vulnerabilities in PostgreSQL Affect Multiple Versions
Article Content
- •Multiple PostgreSQL versions (14, 15, 16, 18) have critical vulnerabilities patched.
- •CVE-2026-6464 and CVE-2026-14664 are among the most severe vulnerabilities addressed.
- •Administrators must apply patches immediately to secure their systems against potential exploitation.
On September 3, 2026, multiple security updates were released for PostgreSQL versions 14, 15, 16, and 18, addressing a total of 24 vulnerabilities. Key vulnerabilities include CVE-2026-6464, which allows early failure processing of data lines as commands, and CVE-2026-14664, which involves a heap buffer overflow that can execute arbitrary code. Other notable vulnerabilities include issues with privilege checks and potential arbitrary file access. These vulnerabilities affect various SUSE Linux distributions, including openSUSE and SUSE Linux Enterprise Server. The updates are crucial for maintaining system security and preventing potential exploitation. Administrators are urged to apply the patches immediately to mitigate risks. The vulnerabilities were published on August 13, 2026, with proof-of-concept code for CVE-2026-14662 released on September 1, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track OpenSUSE and CVE-2026-14662 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…