The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when round-tripped through pg_wchar. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgis-upgradeUpgrade postgresql-upgrade-develUpgrade postgisUpgrade postgres-decoderbufsUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresql-plpython3Upgrade postgis-docsUpgrade postgis-utilsUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade pg_repackUpgrade pgauditUpgrade postgresql-private-develUpgrade postgresql-contribUpgrade postgis-clientUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-staticUpgrade pgvector | Oct 11, 2026 | Sep 15, 2026 |
| Alpine Linux | — | Upgrade postgresql18Upgrade postgresql15Upgrade postgresql16Upgrade postgresql17 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-plpython3Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-llvmjitUpgrade postgresql-docsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgresql-test | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql17-upgrade-develUpgrade postgresql15-testUpgrade postgresql16-private-libsUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-private-develUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-server-develUpgrade postgresql16-test-debuginfoUpgrade postgresql17-private-libsUpgrade postgresql18-plpython3Upgrade postgresql18-server-debuginfoUpgrade postgresql16-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-contribUpgrade postgresql18-upgradeUpgrade postgresql16-pltclUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql17-plpython3Upgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-plperlUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-docsUpgrade postgresql17-plperlUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql18-testUpgrade postgresql17-pltclUpgrade postgresql15-test-debuginfoUpgrade postgresql16-server-debuginfoUpgrade postgresql16-testUpgrade postgresql15-private-develUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql16-llvmjitUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-llvmjitUpgrade postgresql18-upgrade-develUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql16-plperl-debuginfoUpgrade postgresql16-private-develUpgrade postgresql16-upgrade-develUpgrade postgresql17-debugsourceUpgrade postgresql17-server-debuginfoUpgrade postgresql15Upgrade postgresql17-plperl-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql17-server-develUpgrade postgresql15-private-libsUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql18-staticUpgrade postgresql17-test-rpm-macrosUpgrade postgresql17-contrib-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-upgradeUpgrade postgresql18-contrib-debuginfoUpgrade postgresql17-llvmjitUpgrade postgresql16-docs-debuginfoUpgrade postgresql17-docsUpgrade postgresql18-test-debuginfoUpgrade postgresql15-upgradeUpgrade postgresql18Upgrade postgresql16-docsUpgrade postgresql17-testUpgrade postgresql16-server-develUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql15-serverUpgrade postgresql15-docsUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql15-upgrade-develUpgrade postgresql16-staticUpgrade postgresql16-serverUpgrade postgresql18-serverUpgrade postgresql18-debuginfoUpgrade postgresql17-private-develUpgrade postgresql15-debugsourceUpgrade postgresql18-private-libsUpgrade postgresql18-pltclUpgrade postgresql16-upgrade-debuginfoUpgrade postgresql16-upgradeUpgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql17-serverUpgrade postgresql17-test-debuginfoUpgrade postgresql16-plperlUpgrade postgresql16-debugsourceUpgrade postgresql15-contribUpgrade postgresql15-llvmjitUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql17-staticUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql17-docs-debuginfoUpgrade postgresql16-llvmjit-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql17-debuginfoUpgrade postgresql17-contribUpgrade postgresql16-plpython3Upgrade postgresql16-contrib-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql15-docs-debuginfoUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql17Upgrade postgresql16-test-rpm-macrosUpgrade postgresql15-pltclUpgrade postgresql18-debugsourceUpgrade postgresql16Upgrade postgresql15-plperlUpgrade postgresql18-docs-debuginfoUpgrade postgresql16-contribUpgrade postgresql16-private-libs-debuginfoUpgrade postgresql15-staticUpgrade postgresql18-server-develUpgrade postgresql18-llvmjit-debuginfo | Sep 1, 2026 | Aug 13, 2026 |
| Debian | — | Upgrade postgresql-17Upgrade postgresql-15 | Aug 16, 2026 | Aug 16, 2026 |
| Freebsd | — | Upgrade postgresql14-serverUpgrade postgresql15-serverUpgrade postgresql17-serverUpgrade postgresql18-serverUpgrade postgresql16-server | Aug 17, 2026 | Aug 16, 2026 |
| Oracle_linux | — | Upgrade postgresql-contribUpgrade postgresql-private-libsUpgrade postgresql-serverUpgrade postgresql18-private-libsUpgrade postgresql18-staticUpgrade postgresql-server-develUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql18-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql18-server-develUpgrade postgresql-plpython3Upgrade postgis-docsUpgrade postgresql-pltclUpgrade postgresql18-serverUpgrade pgvectorUpgrade postgisUpgrade postgis-utilsUpgrade postgresql18Upgrade postgres-decoderbufsUpgrade postgresql18-testUpgrade pg_repackUpgrade postgresql-upgrade-develUpgrade postgis-clientUpgrade postgresql-staticUpgrade postgresql18-upgradeUpgrade postgresql18-docsUpgrade postgresql18-upgrade-develUpgrade postgresql18-plpython3Upgrade postgresqlUpgrade pgauditUpgrade postgresql18-private-develUpgrade postgresql18-plperlUpgrade postgresql18-test-rpm-macrosUpgrade postgresql-testUpgrade postgresql-private-develUpgrade postgresql-docsUpgrade postgis-upgrade | Oct 22, 2026 | Aug 13, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 16.15Upgrade to PostgreSQL version 15.19Upgrade to PostgreSQL version 18.6Upgrade to PostgreSQL version 17.11Upgrade to PostgreSQL version 14.24 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgis-upgradeUpgrade postgis-debuginfoUpgrade postgresql-pltclUpgrade postgresql18-docs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-server-develUpgrade postgisUpgrade postgresql-private-libs-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql-contribUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql18-testUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-upgradeUpgrade postgresql16-debugsourceUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgres-decoderbufs-debugsourceUpgrade pgvector-debugsourceUpgrade postgresql18-upgrade-develUpgrade postgresql18-plperl-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-develUpgrade postgis-upgrade-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql18-plperlUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-private-develUpgrade postgis-clientUpgrade postgresql-pltcl-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql-private-libsUpgrade postgresql-testUpgrade postgresql16-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql18-debugsourceUpgrade postgresql-debugsourceUpgrade postgresqlUpgrade postgis-debugsourceUpgrade postgresql-plperlUpgrade postgresql18-upgradeUpgrade postgis-docsUpgrade pgauditUpgrade postgresql-private-develUpgrade postgresql18-private-libsUpgrade postgresql-server-debuginfoUpgrade postgresql-serverUpgrade postgresql18-staticUpgrade postgres-decoderbufsUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-contribUpgrade pgvectorUpgrade postgresql18-plpython3Upgrade postgresql-server-develUpgrade postgis-utilsUpgrade postgresql18-server-debuginfoUpgrade postgresql-staticUpgrade pg_repack-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18Upgrade postgresql-upgrade-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql18-docsUpgrade postgresql-docsUpgrade postgis-client-debuginfoUpgrade postgresql-debuginfoUpgrade pg_repack | Aug 28, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgresql-plpython3-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plperlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-pltclUpgrade pg_repack-debuginfoUpgrade postgresql-plpython3Upgrade postgisUpgrade postgresql-serverUpgrade pgvector-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-upgradeUpgrade pgvectorUpgrade postgresql-upgrade-debuginfoUpgrade postgis-upgradeUpgrade postgresql-testUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-server-debuginfoUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresqlUpgrade postgres-decoderbufsUpgrade postgis-utilsUpgrade pgaudit-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-staticUpgrade pgvector-debuginfoUpgrade pg_repackUpgrade postgres-decoderbufs-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-debuginfoUpgrade postgis-client-debuginfoUpgrade postgis-clientUpgrade postgis-debugsourceUpgrade pgauditUpgrade pg_repack-debugsourceUpgrade postgresql-private-libs-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgis-docsUpgrade postgresql-server-develUpgrade postgresql-private-libsUpgrade postgresql-server-devel-debuginfo | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-18Upgrade postgresql-16Upgrade postgresql-14 | Aug 20, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub