PT-2026-40921 · Postgresql Global Development Group+3 · Postgresql+2

Yu Kunpeng · Published 2026-05-14 · Updated 2026-05-21 · CVE-2026-6476

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 17.0 through 17.9 PostgreSQL versions 18.0 through 18.3

Description SQL injection in the pg createsubscriber function allows an attacker with pg create subscription rights to execute arbitrary SQL commands with superuser privileges. The attack is triggered when pg createsubscriber is subsequently executed.

Recommendations Update PostgreSQL version 17 to 17.10. Update PostgreSQL version 18 to 18.4.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2026-07099

BIT-POSTGRESQL-2026-6476

CVE-2026-6476

ECHO-B729-AA9A-E866

OPENSUSE-SU-2026:10809-1

OPENSUSE-SU-2026:10828-1

USN-8294-1

Affected Products

Linuxmint

Postgresql

Ubuntu

References · 45

• https://ubuntu.com/security/notices/USN-8294-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-6476 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-6476 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6477 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6473 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-6476 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07099 · Security Note
• https://ubuntu.com/security/CVE-2026-6475 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8294-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6638 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-6476 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6476 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6478 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6474 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6472 · Vendor Advisory