Detections
Analytics
CVE-2026-116322
medium
Description
Improper locking in PostgreSQL startup processing allows an unauthenticated network client to trigger a server restart, via arranging for authentication_timeout to arrive while it holds a spinlock during cancel handling. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.
References
https://thehackernews.com/2026/11/postgresql-patches-52-flaws-including.html
https://www.postgresql.org/support/security/CVE-2026-116322/