Skip to content
Threat Feed
Subscribe

Tag

Postgresql

9 briefs RSS
high advisory

PostgreSQL COPY PROGRAM Command Execution

The PostgreSQL 'COPY ... PROGRAM' feature enables users with elevated privileges to execute arbitrary operating-system commands, a technique frequently abused by attackers to deploy cryptominers or establish persistence.

PostgreSQL execution network-security
1r 1t
high advisory

Privilege Escalation in AWS Advanced JDBC Wrapper for Aurora PostgreSQL

A privilege escalation vulnerability (CVE-2026-11400) exists in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL, affecting versions 3.0.0 through 4.0.0. A low-privileged authenticated user can craft a function to execute with rds_superuser permissions.

AWS Advanced JDBC Wrapper +1 privilege-escalation vulnerability cloud aws postgresql
1c
high advisory

Vulnerability in PostgreSQL JDBC Allows Security Policy Bypass (CVE-2026-54291)

A vulnerability, CVE-2026-54291, has been discovered in PostgreSQL JDBC versions 42.7.4 up to, but not including, 42.7.12, allowing an attacker to bypass security policies within applications utilizing the affected driver, potentially leading to unauthorized access or actions.

PostgreSQL JDBC vulnerability jdbc postgresql security-bypass cve
2i
medium advisory

PostgreSQL JDBC Driver Vulnerability Allows Denial of Service

A remote, anonymous attacker can exploit a vulnerability in the PostgreSQL JDBC Driver to perform a denial-of-service attack, impacting availability.

JDBC Driver denial-of-service postgresql jdbc
2r 1t
critical threat

Multiple Vulnerabilities in PostgreSQL Allow for Remote Code Execution and Data Breach

Multiple vulnerabilities in PostgreSQL versions 14.x, 15.x, 16.x, 17.x and 18.x could allow for arbitrary code execution, remote denial of service, and data breach, potentially leading to complete system compromise.

PostgreSQL 14.x +4 postgresql vulnerability rce dos sqli
2r 6t 4c
high threat

Multiple Vulnerabilities in PostgreSQL Allow for Remote Code Execution, Denial of Service, and Information Disclosure

Multiple vulnerabilities in PostgreSQL could be exploited by an attacker to execute arbitrary code, conduct a denial of service attack, disclose information, manipulate files, conduct a SQL injection attack, and bypass security measures.

PostgreSQL vulnerability sqlinjection rce dos
2r 3t
critical advisory

ABB Ability Symphony Plus Engineering Vulnerabilities Allow Remote Code Execution

Multiple vulnerabilities in ABB Ability Symphony Plus Engineering, stemming from underlying PostgreSQL flaws, could allow a remote attacker with network access to execute arbitrary code and compromise the system.

ABB Ability Symphony Plus S+ Engineering 2.2 +7 vulnerability ics postgresql
2r 3t 3c
critical advisory

ElectricSQL /v1/shape API SQL Injection Vulnerability

The ElectricSQL sync engine is vulnerable to SQL injection, potentially allowing authenticated users to read, write, and destroy the underlying PostgreSQL database.

sql-injection electricsql postgresql
2r 1t 1c
high advisory

PostgreSQL JDBC Driver SQL Injection Vulnerability

An anonymous, remote attacker can exploit a vulnerability in the PostgreSQL JDBC Driver to perform SQL injection attacks.

sql-injection postgresql jdbc
2r 1t