#PostgreSQL
All CosmicBytez Labs articles tagged #PostgreSQL, across news, security advisories, how-to guides, and projects.
- News
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
CVE-2026-6460 (CVSS 8.8) is a type confusion bug letting an object-creating user run code. Update to 18.7, 17.12, 16.16, 15.20 or 14.25 and rebuild C extensions.
- Security
CVE-2026-45288 — Marten .NET Document DB SQL Injection via regConfig
A CVSS 9.8 critical SQL injection vulnerability in the Marten .NET document database library allows untrusted user input to be interpolated directly into...
- News
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites
Drupal has released emergency security updates for CVE-2026-9082, a highly critical vulnerability in Drupal Core that allows remote code execution,...
- News
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants
Cybersecurity researchers discovered 36 malicious npm packages disguised as Strapi CMS plugins that abused Redis and PostgreSQL connections to harvest...
- Security
Critical RCE in Veeam Backup & Replication — Backup Viewer
A critical CVSS 9.9 vulnerability in Veeam Backup & Replication allows users with the lowest-privileged Backup Viewer role to execute arbitrary code as...