PT-2026-40927 · Unknown+3 · Postgresql+2

Pavel Kohout · CVE-2026-6638 · Published 2026-05-14 · Updated 2026-06-19

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 16.0 through 16.13 PostgreSQL versions 17.0 through 17.9 PostgreSQL versions 18.0 through 18.3

Description SQL injection in logical replication occurs when using the 'ALTER SUBSCRIPTION ... REFRESH PUBLICATION' command. This allows a subscriber table creator to execute arbitrary SQL using the credentials of the subscription's publication side. The execution is triggered during the subsequent REFRESH PUBLICATION operation.

Recommendations Update versions 16.x to 16.14 Update versions 17.x to 17.10 Update versions 18.x to 18.4

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2026-07093

BIT-POSTGRESQL-2026-6638

CVE-2026-6638

ECHO-1169-1A51-1552

JLSEC-2026-608

OPENSUSE-SU-2026:10808-1

OPENSUSE-SU-2026:10809-1

OPENSUSE-SU-2026:10828-1

OPENSUSE-SU-2026:20970-1

OPENSUSE-SU-2026:21104-1

RHSA-2026:22878

RHSA-2026:26203

RHSA-2026:26204

RHSA-2026:26524

RHSA-2026:26525

RHSA-2026:27718

RHSA-2026:27742

RHSA-2026:27743

SUSE-SU-2026:22077-1

SUSE-SU-2026:22149-1

SUSE-SU-2026:22184-1

USN-8294-1

Affected Products

Linuxmint

Postgresql

Ubuntu

References · 71

• https://osv.dev/vulnerability/openSUSE-SU-2026:10809-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-6638 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20970-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10828-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:22149-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6474 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-6638 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-6638 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6472 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2026-6638 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6479 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-postgresql-2026-6638 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-6638 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-6638 · Security Note
• https://ubuntu.com/security/CVE-2026-6473 · Vendor Advisory