Description

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Remediation

References

CVE-2026-2005

Related Vulnerabilities

Chamilo Other Vulnerability (CVE-2023-34962)

Skipper : Missing Authentication for Critical Function Vulnerability (CVE-2026-54246)

SharePoint Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-0251)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23178)

WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Request Forgery (4.8.4)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-122 CVE-2026-2005