PT-2026-32459

Published

2026-04-03

·

Updated

2026-04-03

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
A flaw was found in postgresql. Using an UPDATE ... RETURNING command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
Exploitability
Fix
Vendors
Affected products
Related identifiers
JLSEC-2026-33
Found an issue in the description? Have something to add? Feel free to write us 👾