P
Vendor security profile
postgresql
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs39
Critical0
CISA KEV0
Public exploit0
Patch rate%13
Avg. CVSS7.3
12-month vulnerability rate
0
0
0
4
0
1
3
0
1
28
0
0
CVE KEV
CVE severity distribution
39toplam CVE
High26 (67%)
Medium10 (26%)
Low3 (8%)
Patch and exploitation view
%13
Verified patch
%0
CISA KEV
%0
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
34Unknown
Latest vulnerabilities
7.2
CVE-2026-6471
PostgreSQL logical decoding can dlopen arbitrary file
N
Patch status unknownEPSS %1
4.3
CVE-2026-6470
PostgreSQL fails to check type USAGE privilege
N
Patch status unknownEPSS %0
3.8
CVE-2026-6469
PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
N
Patch status unknownEPSS %0
8.1
CVE-2026-6464
PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands
N
Patch status unknownEPSS %0
8.8
CVE-2026-19385
PostgreSQL pg_dump heap buffer overflow executes arbitrary code
N
Patch status unknownEPSS %0
5.9
CVE-2026-54291
Vulnerability in Postgresql Jdbc Driver
P
Patch verifiedEPSS %0
6.5
CVE-2026-6478
PostgreSQL discloses MD5-hashed passwords via covert timing channel
N
Patch verifiedEPSS %1
8.8
CVE-2026-6477
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
N
Patch verifiedEPSS %0
8.8
CVE-2026-6473
PostgreSQL server undersizes allocations, via integer wraparound
N
Patch verifiedEPSS %1
7.5
CVE-2026-42198
pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS
P
Patch status unknownEPSS %4