CVE-2026-2005

Medienbericht

EPSS 1.21%
Veröffentlicht 12.02.2026 13:00:09
Zuletzt bearbeitet 30.06.2026 03:18:09
Quelle f86ef6dc-4d3a-42ad-8f28-e6d554
CVE-Watchlists
Login
Unerledigt
Login

PostgreSQL pgcrypto heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database.  Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 38

NVD 5 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Postgresql ≫ Postgresql Version >= 14.0 < 14.21

Postgresql ≫ Postgresql Version >= 15.0 < 15.16

Postgresql ≫ Postgresql Version >= 16.0 < 16.12

Postgresql ≫ Postgresql Version >= 17.0 < 17.8

Postgresql ≫ Postgresql Version >= 18.0 < 18.2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.21%	0.645

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
f86ef6dc-4d3a-42ad-8f28-e6d5547a5007	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0b0ca135-0b70-47e7-9f44-1890c2a1c46c	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.

VulnDex Intel

Media Report

11.05.2026 16:03

https://www.postgresql.org/support/security/CVE-2026-2005/

Vendor Advisory

https://access.redhat.com/errata/RHSA-2026:4943

https://access.redhat.com/errata/RHSA-2026:19009

https://access.redhat.com/errata/RHSA-2026:19010

https://access.redhat.com/errata/RHSA-2026:3730

https://access.redhat.com/errata/RHSA-2026:3887

https://access.redhat.com/errata/RHSA-2026:3896

https://access.redhat.com/errata/RHSA-2026:4024

https://access.redhat.com/errata/RHSA-2026:4059

https://access.redhat.com/errata/RHSA-2026:4063

https://access.redhat.com/errata/RHSA-2026:4064

https://access.redhat.com/errata/RHSA-2026:4074

https://access.redhat.com/errata/RHSA-2026:4075

https://access.redhat.com/errata/RHSA-2026:4110

https://access.redhat.com/errata/RHSA-2026:4254

https://access.redhat.com/errata/RHSA-2026:4441

https://access.redhat.com/errata/RHSA-2026:4475

https://access.redhat.com/errata/RHSA-2026:4504

https://access.redhat.com/errata/RHSA-2026:4505

https://access.redhat.com/errata/RHSA-2026:4506

https://access.redhat.com/errata/RHSA-2026:4509

https://access.redhat.com/errata/RHSA-2026:4515

https://access.redhat.com/errata/RHSA-2026:4516

https://access.redhat.com/errata/RHSA-2026:4518

https://access.redhat.com/errata/RHSA-2026:4524

https://access.redhat.com/errata/RHSA-2026:4528

https://access.redhat.com/errata/RHSA-2026:4544

https://access.redhat.com/errata/RHSA-2026:4546

https://access.redhat.com/errata/RHSA-2026:4547

https://access.redhat.com/errata/RHSA-2026:4548

https://access.redhat.com/errata/RHSA-2026:8756

https://access.redhat.com/security/cve/CVE-2026-2005

https://bugzilla.redhat.com/show_bug.cgi?id=2439326

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2005.json

https://nvd.nist.gov/vuln/detail/CVE-2026-2005

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-2005

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-2005

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-2005