CockroachDB PostgreSQL for IBM VPC (26.2.0-26.2.3, 25.4.0-25.4.12, 25.2.0-25.2.20) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/cockroachdb-postgresql-for-ibm-vpc-26.2.0-26.2.3-25.4.0-25.4.12-25.2.0-25.2.20/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 08 Nov 2026 21:26:48 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIBM CockroachDB PostgreSQL for IBM VPC: Privilege escalation via user-defined function (CVE-2026-18893)https://feed.craftedsignal.io/briefs/2026-11-cve-2026-18893/Sun, 08 Nov 2026 21:26:48 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2026-18893/IBM CockroachDB PostgreSQL for IBM VPC versions 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 are vulnerable to privilege escalation via user-defined function.<p>IBM CockroachDB PostgreSQL for IBM VPC is affected by a privilege escalation vulnerability (CVE-2026-18893) involving user-defined functions. The base CVSS v3.1 score for this vulnerability is 7.1.</p> highadvisory