PT-2026-39228 · Pgbouncer+1 · Pgbouncer+1

·

CVE-2026-6666

·

Published

2026-05-08

·

Updated

2026-07-14

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions PgBouncer versions prior to 1.25.2
Description A null pointer reference can occur in the kill pool logins server error() function if a server sends an error response that lacks the SQLSTATE field, potentially leading to a crash.
Recommendations Update to version 1.25.2 or later.

Exploit

Fix

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-86243
BDU:2026-06729
BIT-PGBOUNCER-2026-6666
CLEANSTART-2026-DL78780
CVE-2026-6666

Affected Products

Pgbouncer
Red Os