NewsCERT-FR (ANSSI)
Multiples vulnérabilités dans PostgreSQL Anonymizer (29 octobre 2026)
Teaser from the source
De multiples vulnérabilités ont été découvertes dans PostgreSQL Anonymizer. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
This is the RSS-feed teaser. Read the full article at the original source.
Read at CERT-FR (ANSSI)More on PostgreSQL
Other advisories
- Not ratedosv:CLEANSTART-2024-BJ87056PostgreSQL JDBC Driver (aka PgJDBC) before 42
- Not ratedosv:CLEANSTART-2024-BR64621PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code
- Not ratedosv:CLEANSTART-2024-DM91288pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE
- Not ratedosv:CLEANSTART-2025-WA23325Missing authorization in PostgreSQL built-in views pg_stats_ext and pg_stats_ext_exprs allows an unprivileged database user to read most common values and other statistics from CREATE STATISTICS co...
- Not ratedosv:CLEANSTART-2026-TP41027pgx is a PostgreSQL driver and toolkit for Go
- Not ratedosv:CLEANSTART-2026-UL42181pgjdbc is an open source postgresql JDBC Driver
- Not ratedosv:CLEANSTART-2026-ZM12186pgjdbc is an open source postgresql JDBC Driver
- Not ratedosv:CLEANSTART-2025-BO43006Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running ps...
Other news entries
- PostgreSQL psqlODBC Treiber: Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- PostgreSQL psqlODBC Treiber: Schwachstelle ermöglicht Denial of ServiceVulnerabilityBSI CERT-Bund
- Vulnérabilité dans PostgreSQL psqlODBC (15 octobre 2026)NewsCERT-FR (ANSSI)
- Multiples vulnérabilités dans PostgreSQL JDBC (12 octobre 2026)NewsCERT-FR (ANSSI)
- PostgreSQL JDBC Driver: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code ExecutionNewsThe Hacker News
- 12-Year-Old PostgreSQL Vulnerability Enables Database, Server TakeoverNewsSecurityWeek
- Decade-old PostgreSQL flaw turns backup account into a backdoorNewsCSO Online
Source: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1413/
ID