Servers and applications
CVE-2026-6637
Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A distinct attack is possible if the application declares a user-controlled column as a "refint" cascade primary key and facilitates user-controlled updates to that column. In that case, a SQL injection allows a primary key update…
- Severity
- High 8.8
- Published
- 14 May 2026
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 16 Oct 2026
- Fixed in
- 14.23, 15.18, 16.14, 17.10, 18.4
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
PostgreSQLServers and applications · cpe:a:postgresql:postgresql |
|