Known Vulnerabilities for PostgreSQL by Na
Listed below are 10 of the newest known vulnerabilities associated with "PostgreSQL" by "Na".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-87911 json | An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-... | Not Provided | 2026-09-09 | 2026-09-10 |
| CVE-2026-87016 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.41 until 0.11.1, get_user_by_o... | Not Provided | 2026-09-09 | 2026-09-09 |
| CVE-2026-86464 json | In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Mana... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-85689 json | llmware 0.4.6 contains an SQL injection vulnerability in the collection-database layer (llmware/resources.py) where filter an... | Not Provided | 2026-09-04 | 2026-09-08 |
| CVE-2026-85388 json | Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing aut... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-83534 json | PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_parallel() function that allows the owner of a ... | Not Provided | 2026-09-06 | 2026-09-09 |
| CVE-2026-82526 json | R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary S... | Not Provided | 2026-09-03 | 2026-09-04 |
| CVE-2026-78699 json | Unchecked Return Value vulnerability in ash-project ash_postgres allows a user who can drive a tenant rename to a name that c... | Not Provided | 2026-08-30 | 2026-09-01 |
| CVE-2026-76635 json | baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrator... | Not Provided | 2026-08-20 | 2026-08-25 |
| CVE-2026-76212 json | phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension, declares an incorrect LIKE ESCAP... | Not Provided | 2026-08-19 | 2026-08-25 |