PT-2026-24204 · Unknown · Postgresql

Published 2026-03-10 · Updated 2026-03-19 · CVE-2025-13957

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PostgreSQL (affected versions not specified)

Description A security issue exists due to the use of hard-coded credentials. This could lead to information disclosure and remote code execution when the SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. The SOCKS Proxy is disabled by default.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2026-03441

CVE-2025-13957

ZDI-26-212

Affected Products

Postgresql

References · 9

• https://zerodayinitiative.com/advisories/ZDI-26-212 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-13957 · Security Note
• https://bdu.fstec.ru/vul/2026-03441 · Security Note
• https://twitter.com/aviatrixtrc/status/2034308529813610680 · Twitter Post
• https://twitter.com/infoflowcloud/status/2034521812025872798 · Twitter Post
• https://twitter.com/CVEnew/status/2034520451771187609 · Twitter Post
• https://twitter.com/cyberbivash/status/2031413126231433596 · Twitter Post
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-069-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-069-05.pdf · Note
• https://t.me/CVEtracker/47008 · Telegram Post