Skip to content
PostgreSQL Releases Updates Fixing 52 Vulnerabilities as Version 14 Reaches EOL

PostgreSQL Releases Updates Fixing 52 Vulnerabilities as Version 14 Reaches EOL

First seen 13 Nov 2026, 06:16 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 13, 2026 at 06:18 UTC

PostgreSQL has released updates for versions 14.25, 15.20, 16.16, 17.12, and 18.7, addressing 52 security vulnerabilities and over 140 bugs. This includes the second release candidate for PostgreSQL 19. Version 14.25 is the final release for version 14, which is now end-of-life and will no longer receive security updates. The vulnerabilities include issues such as arbitrary code execution and privilege escalation, with CVEs like CVE-2026-116304 and CVE-2026-116307 rated at CVSS 8.8. Users are advised to upgrade to a supported version to maintain security. The updates were prompted by a backlog of defects identified during AI-assisted reviews.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 18h ago How this analysis works

Timeline

2026-11-12
PostgreSQL updates released
PostgreSQL released updates for versions 14.25 through 18.7, fixing 52 vulnerabilities and over 140 bugs.
Postgresql
2026-11-12
CVE-2026-116304 published
CVE-2026-116304, a critical vulnerability allowing arbitrary code execution, was disclosed.
Postgresql
2026-11-12
CVE-2026-116307 published
CVE-2026-116307, another critical vulnerability enabling arbitrary code execution, was disclosed.
Postgresql

More articles in this cluster (2)

Following this threat?

Track CVE-2026-116303 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (56)

1 / 3

Common questions

Which versions are affected?
Versions 14.25, 15.20, 16.16, 17.12, and 18.7 are affected by the vulnerabilities.
What should I do if I'm using version 14?
Upgrade to a newer supported version, as version 14 is now end-of-life and will not receive further updates.
Are these vulnerabilities being actively exploited?
No active exploitation has been reported, but users should apply the updates to mitigate risks.