Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a JSON document and placing malicious code inside a particular key-value pair. If a superuser calls the import_database_rules() or import_roles_rules() functions, the malicious code is executed with superuser privileges. The problem is resolved in PostgreSQL Anonymizer 3.1.1 and further versions
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-11945 Privilege Escalation in PostgreSQL Anonymizer via Malicious JSON Document https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11945
Post summary
A new privilege‑escalation vulnerability (CVE-2026-11945) in PostgreSQL Anonymizer via malicious JSON documents has been disclosed, with no proof‑of‑concept or exploit details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dalibo | postgresql_anonymizer | - | postgresql | - |