Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:25:17 +0000 CVE-2026-6472 — PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege https://vulnerability.circl.lu/vuln/cve-2026-6472 <p><strong>Affected:</strong> PostgreSQL</p> <p>Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker&#39;s choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.</p> <p><strong>Affected:</strong> PostgreSQL</p> <p>Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker&#39;s choice. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.</p> https://vulnerability.circl.lu/vuln/cve-2026-6472