PostgreSQL Multiple Vulnerabilities

Release Date: 16 Feb 2026

RISK: Medium Risk

TYPE: Servers - Database Servers

Multiple vulnerabilities were identified in PostgreSQL. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, remote code execution and sensitive information disclosure on the targeted system.

---

Impact

• Remote Code Execution
• Information Disclosure
• Elevation of Privilege

---

System / Technologies affected

• PostgreSQL versions prior to 18.2
• PostgreSQL versions prior to 17.8
• PostgreSQL versions prior to 16.12
• PostgreSQL versions prior to 15.16
• PostgreSQL versions prior to 14.21

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

 

• The vendor has issued fixes:
• Update to PostgreSQL version 18.2
• Update to PostgreSQL version 17.8
• Update to PostgreSQL version 16.12
• Update to PostgreSQL version 15.16
• Update to PostgreSQL version 14.21

---

Vulnerability Identifier

• CVE-2026-2003
• CVE-2026-2004
• CVE-2026-2005
• CVE-2026-2006
• CVE-2026-2007

---

Source

• PostgreSQL

---

Related Link

https://www.postgresql.org/about/news/postgresql-182-178-1612-1516-and-1421-released-3235/