Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 #PostgreSQL, Integer Wraparound, #CVE-2026-14677 (HIGH) -DC-Aug2026-1636 https://dailycve.com/postgresql-integer-wraparound-cve-2026-14677-high-dc-aug2026-1636/
Post summary
Tweet announces a high‑severity PostgreSQL integer wraparound vulnerability, CVE‑2026‑14677, with a link to DailyCVE for details, but provides no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | postgresql | postgresql | - | - | - |