Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PostgreSQL Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2026-15741 - Vulnerability Database
PostgreSQL

PostgreSQL Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2026-15741

High
Reference: CVE-2026-15741
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-15741
Title: PostgreSQL Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Overview:

SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly including pg_dump psql commands like sf and any similar usage in non-core tools. Versions before PostgreSQL 18.5 17.11 16.15 15.19 and 14.24 are affected.