PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server.

The flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated

Read More

Threat of AI share crash puts world financial stability at risk, says IMF

Threat of AI share crash puts world financial stability at risk, says IMF Source: Hacker News

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 29.09.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 1 requests (recent log) Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich (GoAccess Report

Read More