As cited
Copy frozen at (site build).
vulnerabilities
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL released patches for CVE-2026-6471, a 12-year-old vulnerability in logical decoding that allows accounts with REPLICATION privileges to execute arbitrary code with database server operating system permissions. The flaw affects versions 18.5 and earlier, 17.10 and earlier, 16.14 and earlier, 15.18 and earlier, and 14.23 and earlier.
Why it matters: Database administrators running affected PostgreSQL versions must patch immediately, as any user granted REPLICATION role can gain full system-level code execution on the database host.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL released patches for CVE-2026-6471, a 12-year-old vulnerability in logical decoding that allows accounts with REPLICATION privileges to execute arbitrary code with database server operating system permissions. The flaw affects versions 18.5 and earlier, 17.10 and earlier, 16.14 and earlier, 15.18 and earlier, and 14.23 and earlier.
Why it matters: Database administrators running affected PostgreSQL versions must patch immediately, as any user granted REPLICATION role can gain full system-level code execution on the database host.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL has issued fixes for CVE-2026-6471, a 12-year-old logical decoding vulnerability that permits accounts with the REPLICATION attribute to execute arbitrary code under the database server's operating system user. The flaw affects versions 14.24 through 18.5. Patches are available for PostgreSQL 14.24, 15.19, 16.15, 17.11, and 18.6 and later.
Why it matters: Database administrators running affected PostgreSQL versions must patch immediately: any user with replication privileges can escalate to full server compromise.
- Source published
- First seen by Cybersecurity Tracker