#postgresql

2 articles

Security Alerts Nov 6, 2026

CVE-2026-119923: Heap Buffer Overflow RCE in AWS Babelfish for PostgreSQL / Aurora PostgreSQL

A heap-based buffer overflow in the TDS prelogin parser of the Babelfish for PostgreSQL extension lets unauthenticated remote attackers execute OS commands. Aurora PostgreSQL is affected too...

Security Alerts Jun 19, 2026

CVE-2026-12048: Stored XSS in pgAdmin 4 Error and Plan Rendering

Stored cross-site scripting in pgAdmin 4's error-rendering and plan-node-rendering paths. Text returned by a PostgreSQL server (ErrorResponse messages, including object names quoted back inside relati...