Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-14668 - Vulnerability Database
PostgreSQL

PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-14668

High
Reference: CVE-2026-14668
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-14668
Title: PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability
Overview:

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory via a chosen non-ctid input. While the calculation loses precision substantial memory value recovery appears possible. Versions before PostgreSQL 18.5 17.11 16.15 15.19 and 14.24 are affected.