Vulnerability Bulletins

CVE-2026-116322

   
Affected software POSTGRESQL
 
Improper locking in PostgreSQL startup processing allows an unauthenticated network client to trigger a server restart, via arranging for authentication_timeout to arrive while it holds a spinlock during cancel handling. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-116322