Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-16238 - Vulnerability Database
PostgreSQL

PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-16238

High
Reference: CVE-2026-16238
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-16238
Title: PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability
Overview:

Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database via conflation of range and multirange values. Within major version 18 minor versions before PostgreSQL 18.5 are affected. Versions before PostgreSQL 18 are unaffected.