Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PostgreSQL Improper Validation of Array Index Vulnerability - CVE-2026-2006 - Vulnerability Database
PostgreSQL

PostgreSQL Improper Validation of Array Index Vulnerability - CVE-2026-2006

High
Reference: CVE-2026-2006
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-2006
Title: PostgreSQL Improper Validation of Array Index Vulnerability
Overview:

Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2 17.8 16.12 15.16 and 14.21 are affected.