Forwarded from the National Cybersecurity Information Sharing and Analysis Center: Cybersecurity Alert NISAC-200-202605-00000011

[Content Description]
Researchers have discovered 11 high-risk security vulnerabilities in PostgreSQL (CVE-2026-6472 to CVE-2026-6479, CVE-2026-6575, CVE-2026-6637, and CVE-2026-6638). These vulnerabilities include stack-based buffer overflows, SQL injection, and integer wraparound. In the most severe cases, they could allow a remote attacker with ordinary privileges to execute arbitrary code. Please confirm and patch them as soon as possible.

[Affected Platforms]
PostgreSQL version 14
PostgreSQL version 15
PostgreSQL version 16
PostgreSQL version 17
PostgreSQL version 18

[Recommended Actions]
The official patch for this vulnerability has been released. Please refer to the official instructions for updating. The URL is as follows: https://www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/