PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-14671
Type confusion in PostgreSQL module quotrefintquot allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report and the fix appear in the git repository with subject quotrefint: Remove plan cache.quot without a CVE number. Versions before PostgreSQL 18.5 17.11 16.15 15.19 and 14.24 are affected.