PT-2026-39226
CVE-2026-6664
·
Published
2026-05-08
·
Updated
2026-09-18
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
PgBouncer versions prior to 1.25.2
Description
An integer overflow in the network packet parsing code allows an unauthenticated remote attacker to bypass a boundary check. By sending a malformed SCRAM authentication packet, the attacker can cause the system to crash, resulting in a denial of service.
Recommendations
Update to version 1.25.2.
Found an issue in the description? Have something to add? Feel free to write us 👾