PostgreSQL Access of Resource Using Incompatible Type (Type Confusion) Vulnerability - CVE-2026-16239
Type confusion in PostgreSQL quotportalquot/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5 17.11 16.15 15.19 and 14.24 are affected.