CVE-2026-6664

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 20, 2026

Last Seen

October 5, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Flaws in PgBouncer Allow Remote Code Execution and Denial of Service72.5

Multiple vulnerabilities have been identified in PgBouncer, a lightweight connection pooler for PostgreSQL, affecting Fedora versions 43 to 45. The flaws, tracked as CVE-2026-6664, CVE-2026-6665, and CVE-2026-6666, could allow arbitrary code execution or denial of service via malicious SCRAM authent...

Critical Integer Overflow Vulnerability in PgBouncer (CVE-2026-6664)72.0

A critical integer overflow vulnerability (CVE-2026-6664) has been identified in PgBouncer versions prior to 1.25.2. This flaw allows unauthenticated remote attackers to crash the service by sending a malformed SCRAM authentication packet. The vulnerability bypasses a boundary check in the network p...