{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/postgresql--18.7--17.12/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-120142"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["PostgreSQL (\u003c 18.7, \u003c 17.12)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["PostgreSQL"],"content_html":"\u003cp\u003eA type confusion vulnerability (CVE-2026-120142) exists in PostgreSQL involving anonymous RECORD types. The issue allows an object creator to execute arbitrary code as the operating system user running the database, via row types having dropped attributes in the same positions but with different widths or alignments. This affects PostgreSQL major versions 17-18, specifically minor versions before 18.7 and 17.12.\u003c/p\u003e\n","date_modified":"2026-11-12T16:57:15Z","date_published":"2026-11-12T16:57:15Z","id":"https://feed.craftedsignal.io/briefs/2026-11-postgresql-type-confusion-cve-2026-120142/","summary":"A type confusion vulnerability in PostgreSQL anonymous RECORD types allows an object creator to execute arbitrary code as the operating system user running the database.","title":"PostgreSQL: Type confusion in anonymous RECORD types (CVE-2026-120142)","url":"https://feed.craftedsignal.io/briefs/2026-11-postgresql-type-confusion-cve-2026-120142/"}],"language":"en","title":"CraftedSignal Threat Feed - PostgreSQL (\u003c 18.7, \u003c 17.12)","version":"https://jsonfeed.org/version/1.1"}