PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server.

The flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

I posted to HN, and then my website was flooded with AI bot traffic

I posted to HN, and then my website was flooded with AI bot traffic Source: Hacker News

Read More

Mark Zuckerberg attacks ‘closed’ AI rivals as Meta returns to open models

Mark Zuckerberg attacks ‘closed’ AI rivals as Meta returns to open models Source: Hacker News

Read More

Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor

Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows

Read More