Vulnerability Bulletins

CVE-2026-4427

   
Affected software POSTGRESQL
 
A flaw was found in pgproto3. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message with a negative field length. This input validation vulnerability can lead to a denial of service (DoS) due to a slice bounds out of range panic.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-4427