P
Vendor security profile
postgresql
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs40
Critical0
CISA KEV0
Public exploit5
Patch rate%13
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
4
0
1
3
0
1
28
0
1
CVE KEV
CVE severity distribution
40toplam CVE
High26 (65%)
Medium11 (28%)
Low3 (8%)
Patch and exploitation view
%13
Verified patch
%0
CISA KEV
%13
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
35Unknown
Latest vulnerabilities
5.9
CVE-2026-109448
psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters
P
Patch status unknownEPSS %0
7.2
CVE-2026-6471
PostgreSQL logical decoding can dlopen arbitrary file
N
Patch status unknownEPSS %1
4.3
CVE-2026-6470
PostgreSQL fails to check type USAGE privilege
N
Patch status unknownEPSS %0
3.8
CVE-2026-6469
PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
N
Patch status unknownEPSS %0
8.1
CVE-2026-6464
PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands
N
Patch status unknownEPSS %0
8.8
CVE-2026-19385
PostgreSQL pg_dump heap buffer overflow executes arbitrary code
N
Patch status unknownEPSS %0
5.9
CVE-2026-54291
Vulnerability in Postgresql Jdbc Driver
P
Patch verifiedEPSS %0
6.5
CVE-2026-6478
PostgreSQL discloses MD5-hashed passwords via covert timing channel
N
Patch verifiedEPSS %1
8.8
CVE-2026-6477
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
N
Patch verifiedEPSS %0
8.8
CVE-2026-6473
PostgreSQL server undersizes allocations, via integer wraparound
N
Patch verifiedEPSS %1