Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-14680 - Vulnerability Database
PostgreSQL

PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-14680

High
Reference: CVE-2026-14680
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-14680
Title: PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability
Overview:

Type confusion with PostgreSQL quotinternalquot data type arguments allows any user to execute arbitrary code as the operating system user running the database via calls to functions with that argument type. Type quotinternalquot represents a class of mutually-incompatible data structures not intended for access from SQL. The system intended to prevent such function calls but this prevention had gaps. Versions before PostgreSQL 18.5 17.11 16.15 15.19 and 14.24 are affected.