Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql18Upgrade postgresql15Upgrade postgresql17Upgrade postgresql16 | Aug 17, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade postgresql18-private-libsUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql15-server-debuginfoUpgrade postgresql18-upgrade-develUpgrade postgresql18-testUpgrade postgresql15Upgrade postgresql16-testUpgrade postgresql18-plpython3Upgrade postgresql18-pltcl-debuginfoUpgrade postgresql18-staticUpgrade postgresql15-upgradeUpgrade postgresql18-docsUpgrade postgresql18-server-debuginfoUpgrade postgresql17-private-develUpgrade postgresql17-contrib-debuginfoUpgrade postgresql17-server-debuginfoUpgrade postgresql17-debugsourceUpgrade postgresql16-server-debuginfoUpgrade postgresql17-upgradeUpgrade postgresql15-upgrade-debuginfoUpgrade postgresql17-upgrade-develUpgrade postgresql17-plpython3Upgrade postgresql18-contribUpgrade postgresql18-plperlUpgrade postgresql18-private-develUpgrade postgresql15-staticUpgrade postgresql16-test-rpm-macrosUpgrade postgresql15-private-libsUpgrade postgresql17-test-debuginfoUpgrade postgresql15-testUpgrade postgresql18Upgrade postgresql18-contrib-debuginfoUpgrade postgresql17-server-develUpgrade postgresql16-docsUpgrade postgresql17Upgrade postgresql17-test-rpm-macrosUpgrade postgresql17-llvmjit-debuginfoUpgrade postgresql17-llvmjitUpgrade postgresql15-test-debuginfoUpgrade postgresql16-server-devel-debuginfoUpgrade postgresql15-private-develUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql16-docs-debuginfoUpgrade postgresql16-server-develUpgrade postgresql18-test-rpm-macrosUpgrade postgresql15-plpython3-debuginfoUpgrade postgresql15-contrib-debuginfoUpgrade postgresql16-test-debuginfoUpgrade postgresql17-docsUpgrade postgresql15-server-devel-debuginfoUpgrade postgresql16-debuginfoUpgrade postgresql15-llvmjit-debuginfoUpgrade postgresql15-pltcl-debuginfoUpgrade postgresql17-private-libsUpgrade postgresql18-upgradeUpgrade postgresql16-plpython3-debuginfoUpgrade postgresql16-upgrade-develUpgrade postgresql15-plperl-debuginfoUpgrade postgresql16-plperl-debuginfoUpgrade postgresql17-pltcl-debuginfoUpgrade postgresql16-pltcl-debuginfoUpgrade postgresql17-plperlUpgrade postgresql18-plperl-debuginfoUpgrade postgresql17-staticUpgrade postgresql15-upgrade-develUpgrade postgresql15-pltclUpgrade postgresql15-docsUpgrade postgresql15-debugsourceUpgrade postgresql18-pltclUpgrade postgresql18-llvmjit-debuginfoUpgrade postgresql15-llvmjitUpgrade postgresql17-testUpgrade postgresql17-plpython3-debuginfoUpgrade postgresql15-plperlUpgrade postgresql16-private-libsUpgrade postgresql16-contrib-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-server-develUpgrade postgresql18-test-debuginfoUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql17-debuginfoUpgrade postgresql17-contribUpgrade postgresql16-private-develUpgrade postgresql16-pltclUpgrade postgresql16-llvmjit-debuginfoUpgrade postgresql16-plpython3Upgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql17-upgrade-devel-debuginfoUpgrade postgresql15-server-develUpgrade postgresql17-docs-debuginfoUpgrade postgresql16-staticUpgrade postgresql16Upgrade postgresql15-private-libs-debuginfoUpgrade postgresql15-contribUpgrade postgresql17-server-devel-debuginfoUpgrade postgresql16-llvmjitUpgrade postgresql15-upgrade-devel-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql17-serverUpgrade postgresql17-pltclUpgrade postgresql17-plperl-debuginfoUpgrade postgresql16-upgrade-debuginfoUpgrade postgresql16-upgradeUpgrade postgresql17-upgrade-debuginfoUpgrade postgresql16-private-libs-debuginfoUpgrade postgresql15-debuginfoUpgrade postgresql15-test-rpm-macrosUpgrade postgresql16-contribUpgrade postgresql16-serverUpgrade postgresql15-serverUpgrade postgresql18-llvmjitUpgrade postgresql17-private-libs-debuginfoUpgrade postgresql16-debugsourceUpgrade postgresql18-debugsourceUpgrade postgresql18-serverUpgrade postgresql15-plpython3Upgrade postgresql15-docs-debuginfoUpgrade postgresql16-upgrade-devel-debuginfoUpgrade postgresql16-plperl | Sep 1, 2026 | Aug 13, 2026 |
| Debian | — | Upgrade postgresql-17Upgrade postgresql-15 | Aug 16, 2026 | Aug 16, 2026 |
| Freebsd | — | Upgrade postgresql15-serverUpgrade postgresql14-serverUpgrade postgresql18-serverUpgrade postgresql17-serverUpgrade postgresql16-server | Aug 17, 2026 | Aug 16, 2026 |
| Postgres | — | Upgrade to PostgreSQL version 15.19Upgrade to PostgreSQL version 18.6Upgrade to PostgreSQL version 14.24Upgrade to PostgreSQL version 16.15Upgrade to PostgreSQL version 17.11 | Aug 14, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade postgresql-serverUpgrade postgresql18-server-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-debuginfoUpgrade pg_repackUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql18-server-develUpgrade postgresql-debugsourceUpgrade postgresql-private-libsUpgrade postgresql16-debuginfoUpgrade postgis-utilsUpgrade postgresql18-plpython3Upgrade postgresql-private-develUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-debugsourceUpgrade postgresql18-contribUpgrade postgresql-test-rpm-macrosUpgrade postgresql18-upgrade-debuginfoUpgrade postgresql18-upgradeUpgrade postgresql18Upgrade postgresql-upgrade-debuginfoUpgrade postgis-debugsourceUpgrade postgres-decoderbufsUpgrade pgaudit-debuginfoUpgrade postgresql18-staticUpgrade postgis-client-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql-plperlNo solution existsUpgrade postgis-docsUpgrade pgvectorUpgrade postgresql18-plpython3-debuginfoUpgrade pg_repack-debugsourceUpgrade pgaudit-debugsourceUpgrade pgauditUpgrade pg_repack-debuginfoUpgrade postgresqlUpgrade postgis-clientUpgrade postgresql-testUpgrade postgresql16-debugsourceUpgrade pgvector-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-pltcl-debuginfoUpgrade postgisUpgrade postgresql-test-debuginfoUpgrade pgvector-debugsourceUpgrade postgresql18-upgrade-develUpgrade postgresql-upgradeUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-docsUpgrade postgis-upgradeUpgrade postgresql18-plperlUpgrade postgresql-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltcl-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-serverUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgis-debuginfoUpgrade postgresql18-test-rpm-macrosUpgrade postgresql18-testUpgrade postgresql18-test-debuginfoUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-private-develUpgrade postgresql-docsUpgrade postgresql-docs-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-upgrade-devel | Aug 31, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-upgrade-debuginfoUpgrade pgaudit-debugsourceUpgrade pg_repack-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgresql-upgradeUpgrade postgresql18-debugsourceUpgrade postgresql18-plpython3-debuginfoUpgrade postgresql18-test-debuginfoUpgrade postgresql-plpython3Upgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-contrib-debuginfoUpgrade pgvector-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql18-serverUpgrade postgresql18Upgrade postgresql18-contribUpgrade postgresql-server-develUpgrade postgresql18-upgrade-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-debuginfoUpgrade postgresql18-docs-debuginfoUpgrade postgresql18-private-libs-debuginfoUpgrade postgresql18-server-develUpgrade pgaudit-debuginfoUpgrade pgvectorUpgrade postgis-upgradeUpgrade postgis-client-debuginfoUpgrade postgis-docsUpgrade postgis-utilsUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-private-libsUpgrade postgis-upgrade-debuginfoUpgrade postgresql18-staticUpgrade postgresql-plpython3-debuginfoUpgrade postgresql18-upgrade-devel-debuginfoUpgrade postgisUpgrade postgis-debugsourceUpgrade postgis-debuginfoUpgrade postgresql18-server-debuginfoUpgrade postgresql18-debuginfoUpgrade postgresql18-private-libsUpgrade postgresql18-plpython3Upgrade postgresql18-plperlUpgrade postgresql18-server-devel-debuginfoUpgrade postgresql18-testUpgrade postgresql-test-debuginfoUpgrade postgresql-staticUpgrade postgresql18-private-develUpgrade postgresql-docsUpgrade postgresql18-upgrade-develUpgrade postgresql-debugsourceUpgrade postgis-clientUpgrade postgresql-server-devel-debuginfoUpgrade pg_repackUpgrade postgresql18-plperl-debuginfoUpgrade postgresql18-contrib-debuginfoUpgrade postgresql18-upgradeUpgrade pgvector-debugsourceUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-server-debuginfoUpgrade postgresql18-docsUpgrade postgres-decoderbufs-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-testUpgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debugsource | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade postgresql-14Upgrade postgresql-16Upgrade postgresql-18 | Aug 20, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub