PostgreSQL — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical SQL Injection Vulnerability in NocoBase (CVE-2026-52887)

  CVE-2026-52887 is a critical SQL injection vulnerability affecting NocoBase, an AI-powered no-code/low-code platform. The flaw allows unauthenticated remote attackers to execute arbitrary SQL queries via the…

  2 articles · Updated July 16, 2026
• Critical SQL Injection Vulnerability in Drupal Core Actively Exploited

  A critical SQL injection vulnerability (CVE-2026-9082) in Drupal Core has been identified, affecting multiple supported versions. The vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to execute…

  6 articles · Updated May 25, 2026
• Operation Escaneo Targets Latin American Critical Infrastructure

  Operation Escaneo is a coordinated cyberattack attributed to the MexicanMafia group, targeting critical infrastructure across Latin America, primarily Mexico. The campaign, which spanned from 2025 to 2026, utilized…

  4 articles · Updated June 18, 2026
• Veeam Discloses Critical RCE Vulnerability in Backup Software

  Veeam reported a critical Remote Code Execution (RCE) vulnerability in its backup and replication software, identified as CVE-2025-59470, with a CVSS score of 9.0. The vulnerability highlights risks associated with…

  1 article · Updated January 29, 2026
• Critical cPanel Vulnerability Exploited in Southeast Asia Cyber Attacks

  A sophisticated cyber campaign has exploited a critical cPanel vulnerability (CVE-2026-41940) to breach government and military servers in Southeast Asia, particularly targeting Indonesia. The attackers utilized a…

  3 articles · Updated May 4, 2026
• Critical Vulnerabilities in pgAdmin 4 Expose Databases to Remote Code Execution

  pgAdmin 4 version 9.16 was released to patch seven vulnerabilities, including critical issues tracked as CVE-2026-12044 to CVE-2026-12050. These vulnerabilities could allow attackers to execute arbitrary commands, gain…

  9 articles · Updated June 22, 2026
• Critical SQL Injection Vulnerability in Kestra (CVE-2026-34612)

  A critical SQL Injection vulnerability, identified as CVE-2026-34612, affects Kestra versions prior to 1.3.7. This vulnerability exists in the GET /api/v1/main/flows/ endpoint of the default Docker Compose deployment,…

  2 articles · Updated April 4, 2026
• Critical Vulnerabilities in Tenable Security Center Prompt Urgent Patch Release

  Tenable has released Security Center Patch SC202607.1 to address multiple vulnerabilities in third-party components, including Apache, OpenSSL, PostgreSQL, PHP, and Redis. The patch resolves critical issues such as SQL…

  2 articles · Updated July 21, 2026
• Critical SQL Injection Vulnerability in LiteLLM Actively Exploited

  Hackers are exploiting a critical SQL injection vulnerability in the LiteLLM open-source large-language model gateway, tracked as CVE-2026-42208. This pre-authentication flaw allows attackers to access sensitive…

  11 articles · Updated April 28, 2026
• Attackers Exploit CVE-2026-39987 to Deploy NKAbuse Malware via Hugging Face

  A critical vulnerability in the marimo Python notebook platform, tracked as CVE-2026-39987, has been actively exploited to deploy a new variant of NKAbuse malware. The flaw allows for remote code execution without…

  5 articles · Updated April 16, 2026

Recent Intelligence Reports

• CVE-2026-64880 | Tenable® — Tenable · July 21, 2026
• [R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0 — Tenable · July 20, 2026
• Okta explains — sec.okta.com · July 19, 2026
• HollowByte DDoS flaw bloats OpenSSL server memory with 11 — Bleepingcomputer · July 18, 2026
• New Spirals ransomware can lock down an entire network in under 24 hours — Pcquest · July 16, 2026
• CVE-2026-52887 AKAOMA CVE VULNERABILITIES / 12h NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to 2.0.61, NocoBase @nocobase/plugin-notification-in-app-message exposed GET /api/myInAppChannels:list, where the filter[latestMsgReceiveTimestamp][$lt] value was inserted into a Sequelize.literal() template string without escaping or parameter binding, allowing a signed-up authenticated user to run stacked PostgreSQL statements an — cve.akaoma.com · July 16, 2026
• New Spirals ransomware encrypts victim network in under 24 hours — Bleepingcomputer · July 16, 2026
• Hydra — www.kali.org · June 30, 2026

Related Entities