PostgreSQL up to 18.4 Portal type confusion

Summaryinfo

A vulnerability labeled as critical has been found in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. Affected by this issue is some unknown functionality of the component Portal. Executing a manipulation can lead to type confusion. The identification of this vulnerability is CVE-2026-16239. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability has been found in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4 and classified as critical. This vulnerability affects an unknown part of the component Portal. The manipulation with an unknown input leads to a type confusion vulnerability. The CWE definition for the vulnerability is CWE-843. The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

The advisory is available at postgresql.org. This vulnerability was named CVE-2026-16239 since 07/20/2026. The exploitation appears to be easy. The attack can be initiated remotely. The technical details are unknown and an exploit is not available.

The vulnerability scanner Nessus provides a plugin with the ID 345929 (RockyLinux 9 : postgresql:16 (RLSA-2026:67491)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 14.24, 15.19, 16.15, 17.11 or 18.5 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (345929) and CERT Bund (WID-SEC-2026-2844). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Affected

• Open Source PostgreSQL

Productinfo

Type

• Database Software

Name

• PostgreSQL

Version

• 14.0
• 14.1
• 14.2
• 14.3
• 14.4
• 14.5
• 14.6
• 14.7
• 14.8
• 14.9
• 14.10
• 14.11
• 14.12
• 14.13
• 14.14
• 14.15
• 14.16
• 14.17
• 14.18
• 14.19
• 14.20
• 14.21
• 14.22
• 14.23
• 15.0
• 15.1
• 15.2
• 15.3
• 15.4
• 15.5
• 15.6
• 15.7
• 15.8
• 15.9
• 15.10
• 15.11
• 15.12
• 15.13
• 15.14
• 15.15
• 15.16
• 15.17
• 15.18
• 16.0
• 16.1
• 16.2
• 16.3
• 16.4
• 16.5
• 16.6
• 16.7
• 16.8
• 16.9
• 16.10
• 16.11
• 16.12
• 16.13
• 16.14
• 17.0
• 17.1
• 17.2
• 17.3
• 17.4
• 17.5
• 17.6
• 17.7
• 17.8
• 17.9
• 17.10
• 18.0
• 18.1
• 18.2
• 18.3
• 18.4

License

• open-source

Website

• Product: https://www.postgresql.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion