VulnHub

Real-time Cybersecurity News

High

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

The Hacker News
CVEExploitVulnerabilityPatchPostgreSQL

Overview

PostgreSQL has issued updates to fix a serious security vulnerability, tracked as CVE-2026-6471, that has existed for 12 years. This flaw allows users with the REPLICATION attribute to execute arbitrary code as the operating system user running the database server. The vulnerability affects several versions of PostgreSQL, specifically those released before 18.6, 17.11, 16.15, 15.19, and 14.24. The potential for attackers to exploit this flaw poses a significant risk to database security, making it crucial for users to apply the updates promptly. The vulnerability was introduced with the logical decoding feature in PostgreSQL 9.4, highlighting the importance of regularly updating database systems to protect against long-standing vulnerabilities.

Key Takeaways

  • Affected Systems: PostgreSQL versions prior to 18.6, 17.11, 16.15, 15.19, and 14.24.
  • Action Required: Users are advised to update to PostgreSQL versions 18.
  • Timeline: Disclosed on October 2023

Original Article Summary

PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server. The flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are

Impact

PostgreSQL versions prior to 18.6, 17.11, 16.15, 15.19, and 14.24.

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Disclosed on October 2023

Remediation

Users are advised to update to PostgreSQL versions 18.6, 17.11, 16.15, 15.19, or 14.24 to mitigate the vulnerability.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to CVE, Exploit, Vulnerability, and 2 more.

Read Original Article

Related Coverage

European parliament members call for slowdown of Serbia’s EU entry over spyware use

CyberScoop

Members of the European Parliament are urging a delay in Serbia's entry into the European Union due to concerns over the government's use of spyware against activists. This call comes after reports that Serbian student activists were targeted with the invasive Pegasus and NoviSpy spyware. These revelations have raised alarms about human rights and privacy violations in Serbia, especially in the context of its EU accession talks. The situation reflects broader pressures on the Serbian government regarding its commitment to democratic practices and the protection of civil liberties. The Parliament's stance indicates that future EU membership may depend on significant improvements in these areas.

Sep 4, 2026

HPE Patches Critical RCE Vulnerabilities in AOS-CX

SecurityWeek

Hewlett Packard Enterprise (HPE) has released critical patches to address a series of vulnerabilities in its AOS-CX networking operating system. These vulnerabilities, collectively identified as CVE-2026-73749, carry a high severity score of 9.8, indicating they could allow remote code execution. This means that attackers could potentially exploit these flaws to take control of affected systems from a distance. Organizations using AOS-CX should prioritize applying these updates to safeguard their networks. The vulnerabilities are significant as they could affect a wide range of network devices, potentially putting sensitive data and operations at risk.

Sep 4, 2026

Companies Have 6 Months to Prepare for Automated Attacks

darkreading

Recent advancements in AI technology have enabled automated systems to conduct end-to-end attacks on various digital infrastructures. These AI models can compromise systems either intentionally or inadvertently, raising alarms for organizations that rely on traditional cybersecurity defenses. Experts warn that companies have a six-month window to enhance their security measures in anticipation of these automated threats becoming more prevalent. The urgency lies in the fact that as AI capabilities improve, so does the potential for sophisticated attacks that could bypass existing security protocols. Organizations need to prepare by investing in updated security technologies and protocols to safeguard their data and systems against these emerging risks.

Sep 4, 2026

Critical Citrix NetScaler auth bypass now leveraged in attacks

BleepingComputer

Attackers are now exploiting a significant vulnerability in Citrix NetScaler, identified as CVE-2026-19490, which allows for authentication bypass. This flaw poses a severe risk as it could enable unauthorized access to systems using affected versions of NetScaler. Companies that utilize Citrix NetScaler for application delivery or networking are particularly at risk, as this vulnerability can compromise their security posture. Security researchers from Previdian have reported that the flaw is actively being exploited in the wild, indicating an urgent need for users to assess their systems. Organizations should prioritize applying any available patches or implementing mitigation strategies to protect against potential breaches.

Sep 4, 2026

New Ted Backdoor Hides Inside Victims' Own HAProxy Builds to Intercept Web Traffic

The Hacker News

A new Linux toolkit, dubbed 'ted', has been discovered embedded within altered HAProxy load balancers used by two South Korean organizations. This malicious implant allows attackers to intercept web traffic and manipulate the pages seen by certain visitors. The presence of 'ted' in the HAProxy binaries indicates that it does not exploit a vulnerability in HAProxy itself; instead, it requires the attackers to execute code on the affected systems. This incident raises significant concerns as it demonstrates how attackers can compromise widely used software to conduct web traffic interception. Organizations using HAProxy should be vigilant and ensure their installations are secure to prevent such intrusions.

Sep 4, 2026

AI Is Ending the Era of Hidden Vulnerabilities — Are Vendors Ready?

darkreading

Software vendors are facing a surge in bug reports that are revealing serious flaws in their secure-by-design promises. This influx of reports is overwhelming companies, leading to delays in addressing and disclosing vulnerabilities. As developers rush to keep up, the risk of undiscovered vulnerabilities increases, which can leave users exposed to potential attacks. This situation raises concerns about the readiness of vendors to manage and respond to security issues effectively. The article emphasizes the need for better processes to handle the growing number of vulnerabilities in software products, suggesting that without improvements, significant security risks may persist.

Sep 4, 2026