8.8
CVE-2026-92867
- EPSS 0.34%
- Veröffentlicht 30.09.2026 07:20:27
- Zuletzt bearbeitet 30.09.2026 17:16:51
- Erkennungen
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerPgpool Global Development Group
≫
Produkt
Pgpool-II
Default Statusunaffected
Version <=
4.7.2
Version
4.7.0
Status
affected
Version <=
4.6.7
Version
4.6.0
Status
affected
Version <=
4.5.12
Version
4.5.0
Status
affected
Version <=
4.4.17
Version
4.4.0
Status
affected
Version <=
4.3.20
Version
4.3.0
Status
affected
Version <=
4.2.x
Version
3.5.x
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.34% | 0.255 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| JP CERT | 8.7 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| JP CERT | 8.8 | 2.8 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
https://pgpool.net/news/2026-09-29/
https://jvn.jp/en/jp/JVN22475874/