The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-6460: n/a PostgreSQL: Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running…8.8 HighN/AN/ANov 12, 2026
CVE-2026-18447: n/a PostgreSQL: Type confusion in PostgreSQL SQL-language functions allows an object creator to execute arbitrary code as the operating…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120153: n/a PostgreSQL: SQL injection in PostgreSQL extension-script substitutions allows an attacker with database-level CREATE privilege to…7.2 HighN/AN/ANov 12, 2026
CVE-2026-120151: n/a PostgreSQL: Type confusion in PostgreSQL plpgsql record-field assignment allows an object creator to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120144: n/a PostgreSQL: Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120143: n/a PostgreSQL: Use after free in PostgreSQL trigger functions allows an object creator to execute arbitrary code as the operating…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120142: n/a PostgreSQL: Type confusion in PostgreSQL anonymous RECORD types allows an object creator to execute arbitrary code as the operating…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120141: n/a PostgreSQL: Type confusion in PostgreSQL materialized set-returning functions allows a database user to execute arbitrary code as…8.8 HighN/AN/ANov 12, 2026
CVE-2026-120139: n/a PostgreSQL: Integer wraparound in PostgreSQL in-memory tuple-size calculations allows a database user to execute arbitrary code as…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116336: n/a PostgreSQL: Operation on a dropped index in PostgreSQL REINDEX CONCURRENTLY allows an object creator to execute arbitrary code as…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116335: n/a PostgreSQL: Type confusion in PostgreSQL operator commutator and negator links allows an object creator to execute arbitrary code…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116332: n/a PostgreSQL: Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116331: n/a PostgreSQL: Type confusion in PostgreSQL min/max aggregate optimization allows an object creator to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116320: n/a PostgreSQL: Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116319: n/a PostgreSQL: Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116318: n/a PostgreSQL: SQL injection in PostgreSQL pg_dump allows an object creator to execute arbitrary SQL as the user restoring the dump,…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116317: n/a PostgreSQL: Heap-based buffer overflow in PostgreSQL ts_rank_cd() may allow a database user to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116316: n/a PostgreSQL: Improper protection of alternate path in PostgreSQL security-restricted operations allows an object creator to execute…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116315: n/a PostgreSQL: Heap-based buffer overflow in PostgreSQL tsvector_delete() allows a database user to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116314: n/a PostgreSQL: Improper input validation in PostgreSQL pg_restore allows a non-plain archive provider to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116313: n/a PostgreSQL: Untrusted search path in PostgreSQL vacuumdb allows a database owner to execute arbitrary SQL as the database user…7.2 HighN/AN/ANov 12, 2026
CVE-2026-116309: n/a PostgreSQL: Type confusion in PostgreSQL plperl may allow an object creator to execute arbitrary code, via blessing a non-hash…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116307: n/a PostgreSQL: Use after free in PostgreSQL plperl allows an object creator to execute arbitrary code as the operating system user…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116306: n/a PostgreSQL: Type confusion in PostgreSQL composite-value field assignment allows an object creator to execute arbitrary code as the…8.8 HighN/AN/ANov 12, 2026
CVE-2026-116304: n/a PostgreSQL: Use after free in PostgreSQL coordination of anonymous RECORD type identifiers among parallel workers allows a database…8.8 HighN/AN/ANov 12, 2026
276-300 of 433023