PT-2026-145819

CVE-2026-116329

·

Published

2026-11-12

·

Updated

2026-11-12

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Type confusion in PostgreSQL statistics import allows a table maintainer to execute arbitrary code as the operating system user running the database, via nested SET DATA TYPE during conversion of values to import. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-843: Access of Resource Using Incompatible Type (\'Type Confusion\')
Related identifiers
CVE-2026-116329
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com