CVE-2026-16239 in PostgreSQLinfo

Zusammenfassung

von MITRE • 13.08.2026

Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

PostgreSQL

Reservieren

20.07.2026

Veröffentlichung

13.08.2026

Moderieren

akzeptiert

Eintrag

VDB-389434

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

low

Sektor

Pharma, Police, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-16239
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-16239
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-16239/

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!