Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when round-tripped through pg_wchar. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade pgvectorUpgrade pg_repackUpgrade postgresqlUpgrade postgis-clientUpgrade pgauditUpgrade postgresql-plperlUpgrade postgresql-test-rpm-macrosUpgrade postgresql-docsUpgrade postgresql-private-develUpgrade postgresql-staticUpgrade postgresql-upgradeUpgrade postgis-utilsUpgrade postgisUpgrade postgis-docsUpgrade postgresql-testUpgrade postgis-upgradeUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgres-decoderbufsUpgrade postgresql-upgrade-develUpgrade postgresql-private-libs | Oct 11, 2026 | Sep 15, 2026 |
| Alpine Linux | — | Upgrade postgresql15Upgrade postgresql18Upgrade postgresql16Upgrade postgresql17 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql18-pltclUpgrade postgresql16-upgrade-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql15-docsUpgrade postgresql16Upgrade postgresql16-upgradeUpgrade postgresql15-debugsourceUpgrade postgresql17-testUpgrade postgresql15-serverUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql15-plperlUpgrade postgresql18-debugsourceUpgrade postgresql15-staticUpgrade postgresql16-private-libs-debuginfoUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql18-server-develUpgrade postgresql15-docs-debuginfoUpgrade postgresql15-pltclUpgrade postgresql16-test-rpm-macrosUpgrade postgresql16-contrib-debuginfoUpgrade postgresql16-llvmjit-debuginfoUpgrade postgresql15-plpython3Upgrade postgresql16-plpython3Upgrade postgresql17-contribUpgrade postgresql17-debuginfoUpgrade postgresql16-serverUpgrade postgresql16-staticUpgrade postgresql15-upgrade-develUpgrade postgresql18-serverUpgrade postgresql17Upgrade postgresql16-server-develUpgrade postgresql17-docs-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql15-contribUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql17-test-debuginfoUpgrade postgresql15-plperl-debuginfoUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql16-plperlUpgrade postgresql17-staticUpgrade postgresql16-debugsourceUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql15-private-libs-debuginfoUpgrade postgresql16-contribUpgrade postgresql17-private-develUpgrade postgresql17-serverUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql18-plperlUpgrade postgresql18-plperl-debuginfoUpgrade postgresql17-private-libsUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql16-plperl-debuginfoUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-llvmjitUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql17-contrib-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql17-upgrade-develUpgrade postgresql16-private-libsUpgrade postgresql15-testUpgrade postgresql15-private-develUpgrade postgresql16-server-debuginfoUpgrade postgresql16-test-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql15-private-libsUpgrade postgresql18-staticUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql17-plperl-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql15Upgrade postgresql17-test-rpm-macrosUpgrade postgresql17-plperlUpgrade postgresql17-llvmjitUpgrade postgresql18Upgrade postgresql17-pltclUpgrade postgresql15-test-debuginfoUpgrade postgresql16-testUpgrade postgresql16-private-develUpgrade postgresql16-docs-debuginfoUpgrade postgresql17-debugsourceUpgrade postgresql18-docsUpgrade postgresql17-upgradeUpgrade postgresql17-server-develUpgrade postgresql16-docsUpgrade postgresql17-server-debuginfoUpgrade postgresql17-docsUpgrade postgresql16-upgrade-develUpgrade postgresql15-upgradeUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-contribUpgrade postgresql16-pltclUpgrade postgresql17-plpython3Upgrade postgresql18-testUpgrade postgresql16-llvmjitUpgrade postgresql15-contrib-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-plpython3Upgrade postgresql16-debuginfoUpgrade postgresql15-server-develUpgrade postgresql15-llvmjit-debuginfo | Sep 1, 2026 | Aug 13, 2026 |
| Debian | — | Upgrade postgresql-15Upgrade postgresql-17 | Aug 16, 2026 | Aug 16, 2026 |
| Freebsd | — | Upgrade postgresql16-serverUpgrade postgresql17-serverUpgrade postgresql18-serverUpgrade postgresql14-serverUpgrade postgresql15-server | Aug 17, 2026 | Aug 16, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 16.15Upgrade to PostgreSQL version 15.19Upgrade to PostgreSQL version 18.6Upgrade to PostgreSQL version 14.24Upgrade to PostgreSQL version 17.11 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgresql-server-develUpgrade postgresql18-plpython3Upgrade postgis-utilsUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql-private-libsUpgrade postgresql16-debuginfoUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade pg_repack-debuginfoUpgrade postgresql18-staticUpgrade postgresql-plperlUpgrade postgis-debugsourceUpgrade postgresql-serverUpgrade postgresql-upgrade-debuginfoUpgrade postgresql18-upgradeUpgrade postgis-clientUpgrade postgresqlUpgrade postgresql18-debugsourceUpgrade postgresql-debugsourceUpgrade postgresql18-server-debuginfoUpgrade postgresql18-plpython3-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-private-develUpgrade postgresql18Upgrade pgaudit-debuginfoUpgrade postgresql-docsUpgrade pgauditUpgrade postgis-docsUpgrade postgresql18-docsUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-contribUpgrade postgresql-test-rpm-macrosUpgrade pgvectorUpgrade pgvector-debuginfoUpgrade pg_repackUpgrade postgis-client-debuginfoUpgrade postgresql-testUpgrade postgresql18-private-libsUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql18-serverUpgrade postgresql18-upgrade-develUpgrade postgresql18-plperl-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql18-server-develUpgrade postgisUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgis-upgrade-debuginfoUpgrade postgresql-plpython3Upgrade postgresql16-debugsourceUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql18-testUpgrade postgresql18-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgresql-pltclUpgrade postgis-upgradeUpgrade postgresql18-plperlUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-private-develUpgrade postgresql18-test-rpm-macrosUpgrade pgvector-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgis-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql18-docs-debuginfo | Aug 28, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgresql-plperlUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgisUpgrade postgresql-testUpgrade pg_repack-debuginfoUpgrade postgis-upgradeUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-plperl-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3Upgrade pgvector-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-serverUpgrade pgvectorUpgrade postgresql-test-debuginfoUpgrade pgaudit-debugsourceUpgrade postgis-upgrade-debuginfoUpgrade postgis-docsUpgrade postgis-debugsourceUpgrade postgis-utilsUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-develUpgrade pgvector-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-private-libs-debuginfoUpgrade pgauditUpgrade pg_repack-debugsourceUpgrade postgresql-private-libsUpgrade postgis-client-debuginfoUpgrade postgis-clientUpgrade pg_repackUpgrade postgresql-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgis-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresqlUpgrade postgresql-contrib | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-18Upgrade postgresql-16Upgrade postgresql-14 | Aug 20, 2026 | Aug 13, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub