PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-bb0d483289 advisory.

    Backport fix for CVE-2026-73515.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-0fe48ab374 advisory.

    Backport fix for CVE-2026-73515.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67848 advisory.

    * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser     (CVE-2026-6476)

    * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery     functions (CVE-2026-14662)

    * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump     (CVE-2026-18408)

    * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN     (CVE-2026-6464)

    * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion with internal arguments     (CVE-2026-14680)

    * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)

    * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl     (CVE-2026-14677)

    * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound     (CVE-2026-15742)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)

    * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats()     (CVE-2026-16238)

    * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)

    * postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow     (CVE-2026-14676)

    * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow     (CVE-2026-14670)

    * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator     (CVE-2026-14668)

    * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)

    * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67166 advisory.

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671660 advisory.

    [3.5.3-1.1]
    - Fix CVE-2026-73515: validate FlatGeobuf input buffers before decoding

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1882:01 advisory.

    * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery     functions (CVE-2026-14662)
      * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump     (CVE-2026-18408)
      * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN     (CVE-2026-6464)
      * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion with internal arguments     (CVE-2026-14680)
      * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)
      * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl     (CVE-2026-14677)
      * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound     (CVE-2026-15742)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle     (CVE-2026-16239)
      * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
      * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module     (CVE-2026-14671)
      * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow     (CVE-2026-14670)
      * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator     (CVE-2026-14668)
      * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)
      * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)
      * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67848 advisory.

    * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser     (CVE-2026-6476)
      * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery     functions (CVE-2026-14662)
      * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump     (CVE-2026-18408)
      * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN     (CVE-2026-6464)
      * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion with internal arguments     (CVE-2026-14680)
      * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)
      * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl     (CVE-2026-14677)
      * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound     (CVE-2026-15742)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle     (CVE-2026-16239)
      * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats()     (CVE-2026-16238)
      * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module     (CVE-2026-14671)
      * postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow     (CVE-2026-14676)
      * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow     (CVE-2026-14670)
      * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator     (CVE-2026-14668)
      * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)
      * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)
      * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67491 advisory.

    * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery     functions (CVE-2026-14662)
      * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump     (CVE-2026-18408)
      * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN     (CVE-2026-6464)
      * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion with internal arguments     (CVE-2026-14680)
      * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)
      * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl     (CVE-2026-14677)
      * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound     (CVE-2026-15742)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle     (CVE-2026-16239)
      * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
      * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)
      * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module     (CVE-2026-14671)
      * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow     (CVE-2026-14670)
      * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator     (CVE-2026-14668)
      * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)
      * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)
      * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67848 advisory.

    - Fix backport regression in ST_FromFlatGeobufToTable (CVE-2026-73515 patch)
    - Backported a patch to fix a security vulnerability (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-67491 advisory.

    - Fix CVE-2026-73515
    - Fix CVE-2026-73515

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67848 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser     (CVE-2026-6476)

    * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery     functions (CVE-2026-14662)

    * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump     (CVE-2026-18408)

    * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN     (CVE-2026-6464)

    * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion with internal arguments     (CVE-2026-14680)

    * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)

    * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl     (CVE-2026-14677)

    * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound     (CVE-2026-15742)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)

    * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats()     (CVE-2026-16238)

    * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)

    * postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow     (CVE-2026-14676)

    * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow     (CVE-2026-14670)

    * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator     (CVE-2026-14668)

    * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)

    * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67491 advisory.

    * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery     functions (CVE-2026-14662)

    * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump     (CVE-2026-18408)

    * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN     (CVE-2026-6464)

    * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion with internal arguments     (CVE-2026-14680)

    * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)

    * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl     (CVE-2026-14677)

    * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound     (CVE-2026-15742)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)

    * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)

    * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)

    * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow     (CVE-2026-14670)

    * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator     (CVE-2026-14668)

    * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)

    * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67166 advisory.

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67491 advisory.

    PostgreSQL is an advanced object-relational database management system (DBMS).

    Security Fix(es):

    * postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery     functions (CVE-2026-14662)

    * postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump     (CVE-2026-18408)

    * postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN     (CVE-2026-6464)

    * postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion with internal arguments     (CVE-2026-14680)

    * postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)

    * postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl     (CVE-2026-14677)

    * postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound     (CVE-2026-15742)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)

    * postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)

    * postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)

    * postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)

    * postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow     (CVE-2026-14670)

    * postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator     (CVE-2026-14668)

    * postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)

    * postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67166 advisory.

    PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect,     PostGIS spatially enables the PostgreSQL server, allowing it to be used as a backend spatial database     for geographic information systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS     follows the OpenGIS Simple Features Specification for SQL and has been certified as compliant with the     Types and Functions profile.

    Security Fix(es):

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:65899 advisory.

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-658990 advisory.

    [3.5.3-4.1]
    - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:65899 advisory.

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65899 advisory.

    PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect,     PostGIS spatially enables the PostgreSQL server, allowing it to be used as a backend spatial database     for geographic information systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS     follows the OpenGIS Simple Features Specification for SQL and has been certified as compliant with the     Types and Functions profile.

    Security Fix(es):

    * postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer     (CVE-2026-73515)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause     memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property     metadata decoder verifies that a string length field is present but fails to verify that the subsequent     string body is contained within the supplied buffer before materializing it into a SQL-visible value,     enabling memory disclosure or denial of service. (CVE-2026-73515)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
350837	Fedora 43 : postgresql16-postgis / postgresql17-postgis / postgresql18-postgis (2026-bb0d483289)	Nessus	Fedora Local Security Checks	Local	high
350795	Fedora 44 : postgresql16-postgis / postgresql17-postgis / postgresql18-postgis (2026-0fe48ab374)	Nessus	Fedora Local Security Checks	Local	high
349082	RockyLinux 9 : postgresql:18 (RLSA-2026:67848)	Nessus	Rocky Linux Local Security Checks	Local	high
348818	AlmaLinux 10 : postgresql18-postgis (ALSA-2026:67166)	Nessus	Alma Linux Local Security Checks	Local	high
348773	Oracle Linux 10 : ELSA-2026-67166-0: / postgresql18-postgis (ELSA-2026-671660)	Nessus	Oracle Linux Local Security Checks	Local	high
348189	MiracleLinux 9 : postgresql:16 (AXSA:2026-1882:01)	Nessus	Miracle Linux Local Security Checks	Local	high
346903	AlmaLinux 9 : postgresql:18 (ALSA-2026:67848)	Nessus	Alma Linux Local Security Checks	Local	high
346902	AlmaLinux 9 : postgresql:16 (ALSA-2026:67491)	Nessus	Alma Linux Local Security Checks	Local	high
346893	Oracle Linux 9 : postgresql:18 (ELSA-2026-67848)	Nessus	Oracle Linux Local Security Checks	Local	high
346892	Oracle Linux 9 : postgresql:16 (ELSA-2026-67491)	Nessus	Oracle Linux Local Security Checks	Local	high
346291	RHEL 9 : postgresql:18 (RHSA-2026:67848)	Nessus	Red Hat Local Security Checks	Local	high
345929	RockyLinux 9 : postgresql:16 (RLSA-2026:67491)	Nessus	Rocky Linux Local Security Checks	Local	high
345926	RockyLinux 10 : postgresql18-postgis (RLSA-2026:67166)	Nessus	Rocky Linux Local Security Checks	Local	high
345860	RHEL 9 : postgresql:16 (RHSA-2026:67491)	Nessus	Red Hat Local Security Checks	Local	high
345609	RHEL 10 : postgresql18-postgis (RHSA-2026:67166)	Nessus	Red Hat Local Security Checks	Local	high
344849	AlmaLinux 10 : postgresql16-postgis (ALSA-2026:65899)	Nessus	Alma Linux Local Security Checks	Local	high
344791	Oracle Linux 10 : ELSA-2026-65899-0: / postgresql16-postgis (ELSA-2026-658990)	Nessus	Oracle Linux Local Security Checks	Local	high
344463	RockyLinux 10 : postgresql16-postgis (RLSA-2026:65899)	Nessus	Rocky Linux Local Security Checks	Local	high
343991	RHEL 10 : postgresql16-postgis (RHSA-2026:65899)	Nessus	Red Hat Local Security Checks	Local	high
335382	Linux Distros Unpatched Vulnerability : CVE-2026-73515	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-73515

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high