Skip to content
Threat Feed

CPE

Cpe:2.3:a:pgbouncer:pgbouncer:*:*:*:*:*:*:*:*

1 brief RSS
high threat

Actively Exploited Integer Overflow in PgBouncer (CVE-2026-6664)

PgBouncer versions prior to 1.25.2 are vulnerable to an integer overflow (CVE-2026-6664), enabling unauthenticated remote attackers to trigger a denial-of-service via a crafted SCRAM authentication packet, with active exploitation reported.

exploited PgBouncer < 1.25.2 integer overflow denial of service CVE-2026-6664
1r 1t 1c