PostgreSQL (< 18.7, < 17.12) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/postgresql--18.7--17.12/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 16:57:15 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPostgreSQL: Type confusion in anonymous RECORD types (CVE-2026-120142)https://feed.craftedsignal.io/briefs/2026-11-postgresql-type-confusion-cve-2026-120142/Thu, 12 Nov 2026 16:57:15 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-postgresql-type-confusion-cve-2026-120142/A type confusion vulnerability in PostgreSQL anonymous RECORD types allows an object creator to execute arbitrary code as the operating system user running the database.<p>A type confusion vulnerability (CVE-2026-120142) exists in PostgreSQL involving anonymous RECORD types. The issue allows an object creator to execute arbitrary code as the operating system user running the database, via row types having dropped attributes in the same positions but with different widths or alignments. This affects PostgreSQL major versions 17-18, specifically minor versions before 18.7 and 17.12.</p> highadvisory