Detections
Analytics
PostgreSQL 14.x < 14.21 / 15.x < 15.16 / 16.x < 16.12 / 17.x < 17.8 / 18.x < 18.2 Multiple Vulnerabilities
high Nessus Plugin ID 299758
Synopsis
The remote database server is affected by multiple vulnerabilities.Description
The version of PostgreSQL installed on the remote host is 14 prior to 14.21, 15 prior to 15.16, 16 prior to 16.12, 17 prior to 17.8, or 18 prior to 18.2. As such, it is potentially affected by multiple vulnerabilities:- Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected. (CVE-2026-2006)
- Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected. (CVE-2026-2005)
- Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected. (CVE-2026-2004)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to PostgreSQL 14.21 / 15.16 / 16.12 / 17.8 / 18.2 or later.See Also
http://www.nessus.org/u?fbf9397e
https://www.postgresql.org/support/security/CVE-2026-2003/
https://www.postgresql.org/support/security/CVE-2026-2004/
Plugin Details
Severity: High
ID: 299758
File Name: postgresql_20260212.nasl
Version: 1.1
Type: combined
Agent: windows, macosx, unix
Family: Databases
Published: 2/23/2026
Updated: 2/23/2026
Configuration: Enable thorough checks (optional)
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.4
CVSS v2
Risk Factor: High
Base Score: 9
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2026-2006
CVSS v3
Risk Factor: High
Base Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: cpe:/a:postgresql:postgresql
Patch Publication Date: 2/12/2026
Vulnerability Publication Date: 2/12/2026
Reference Information
CVE: CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006
IAVB: 2026-B-0047