Vulnerability Bulletins

CVE-2026-116318

   
Affected software POSTGRESQL
 
SQL injection in PostgreSQL pg_dump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-116318