Skip to content
Threat Feed
Subscribe

Vendor

PgBouncer

2 briefs RSS
medium advisory

Multiple Denial of Service Vulnerabilities in PgBouncer

Multiple vulnerabilities in PgBouncer allow a remote, unauthenticated attacker to trigger a Denial of Service condition, impacting the availability of the connection pooler.

PgBouncer denial-of-service database-security vulnerability-management
1t
high threat

Actively Exploited Integer Overflow in PgBouncer (CVE-2026-6664)

PgBouncer versions prior to 1.25.2 are vulnerable to an integer overflow (CVE-2026-6664), enabling unauthenticated remote attackers to trigger a denial-of-service via a crafted SCRAM authentication packet, with active exploitation reported.

exploited PgBouncer < 1.25.2 integer overflow denial of service CVE-2026-6664
1r 1t 1c