Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
PostgreSQL Use of Externally-Controlled Format String Vulnerability (CVE-2026-6474) - Vulnerability Database

PostgreSQL Use of Externally-Controlled Format String Vulnerability (CVE-2026-6474)

Description

Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

References

CVE-2026-6474

Related Vulnerabilities

MySQL CVE-2022-21314 Vulnerability (CVE-2022-21314) Medium
Common tags: Missing Update Known Vulnerabilities
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2020-24977) Medium
Common tags: Missing Update Known Vulnerabilities
Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-24407) Critical
Common tags: Missing Update Known Vulnerabilities
Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-24408) Medium
Common tags: Missing Update Known Vulnerabilities
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-24554) High
Common tags: Missing Update Known Vulnerabilities

Severity

Medium

Classification

CVE-2026-6474
CWE-134
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update
Known Vulnerabilities