GLOBEALERT
Sign in
CYBER● ELEVATEDSep 4 · Sep 4, 2026, 3:20 PM

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

The Hacker News · global

PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server. The flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are

Read at The Hacker News Ask the Analyst about this

GlobeAlert aggregates and classifies open sources; the story above belongs to its publisher. Summaries are machine-generated from the source text.

See it on the live mapEvents around the world right now

More in Cyber

CYBERnow[Virtual Event] Cybersecurity Outlook 2027Dark ReadingCYBERnow[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AIDark ReadingCYBER3h agoDeepSeek offers user refunds after suffering another major outageSouth China Morning PostCYBER3h agoUkrainian troops lost Starlink access for a day. Elon Musk and the Trump White House both deny responsibility.Meduza [en]