Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-12 | 4 | Disclosure3Patch1 |
| 2026-02-13 | 2 | Patch2 |
| 2026-02-14 | 1 | Patch1 |
| 2026-02-17 | 1 | Disclosure1 |
| 2026-02-18 | 1 | Patch1 |
| 2026-02-19 | 1 | Patch1 |
| 2026-02-25 | 1 | Disclosure1 |
| 2026-03-06 | 1 | Patch1 |
| 2026-03-10 | 1 | Disclosure1 |
| 2026-03-12 | 1 | Patch1 |
| 2026-03-31 | 1 | Disclosure1 |
| 2026-05-05 | 2 | Exploit1PoC1 |
| 2026-05-07 | 4 | Disclosure1PoC3 |
| 2026-05-12 | 1 | Disclosure1 |
| 2026-05-13 | 1 | PoC1 |
| 2026-05-18 | 2 | Disclosure1General1 |
| 2026-05-19 | 3 | PoC3 |
| 2026-05-20 | 1 | PoC1 |
| 2026-05-26 | 1 | PoC1 |
| 2026-06-09 | 1 | General1 |
| 2026-06-10 | 1 | Disclosure1 |
| 2026-06-12 | 1 | General1 |
| 2026-06-15 | 1 | PoC1 |
| 2026-07-23 | 2 | PoC2 |
PoC for CVE-2026-2005 - PostgreSQL pgcrypto Heap Overflow Exploit https://github.com/var77/CVE-2026-2005 #CVE20262005 #PostgreSQL #pgcrypto #Exploit #PoC #pwn https://t.co/EUJbHacTSU
Post summary
A Proof of Concept exploit for CVE‑2026‑2005, a heap overflow in PostgreSQL’s pgcrypto, has been published on GitHub, with no indication of active exploitation or a patch.
RCE PoC - CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit https://github.com/dinosn/cve-2026-2005
Post summary
This tweet announces a Proof of Concept for CVE‑2026‑2005, a heap overflow in PostgreSQL pgcrypto that enables remote code execution, and includes a link to the exploit code.
CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow leading to RCE - @wiz_io https://www.zeroday.cloud/blog/postgres-xint
Post summary
The tweet announces CVE‑2026‑2005, a heap buffer overflow in PostgreSQL pgcrypto that can cause remote code execution, and links to a blog post likely containing further details.
> Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Note that pgcrypto (and other extensions) can be enabled by any user! This does not require admin. https://www.postgresql.org/support/security/CVE-2026-2005/
Post summary
The text announces a heap buffer overflow in PostgreSQL pgcrypto that permits arbitrary code execution, notes the extension can be enabled by any user, and links to a vendor advisory that presumably contains a patch.
CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit (lab) https://github.com/dinosn/cve-2026-2005
Post summary
A lab‑based exploit for CVE‑2026‑2005 against PostgreSQL pgcrypto is linked, indicating functional exploit code, but no evidence of live exploitation or vendors’ fixes.
@carste1n Glad that you're interested in the talk. This should work: https://docs.google.com/presentation/d/11wokD_IAO5QFwA0tZzEKfqCI-Ne1iJ3XASnE7SW5zxs/edit?usp=sharing Let me know if it doesn't. Talk recording should also be available soon-ish. For now, you can also take the blog post as a more detailed reference along the slides: https://www.zeroday.cloud/blog/postgresql-cve-2026-2005-deep-dive
Post summary
The message refers to a talk and a blog post about CVE‑2026‑2005 but does not contain direct PoC, exploitation evidence, patch information, or technical details.
PostgreSQL pgcrypto heap buffer overflow executes arbitrary code CVE: CVE-2026-2005 PT ID: PT-2026-7845 Vendor: PostgreSQL Product: PostgreSQL CVSS: 8.8 Credits: Team Xint Code Description: Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-2005 • https://www.postgresql.org/support/security/CVE-2026-2005/ PoC/Exploit: https://github.com/var77/CVE-2026-2005 #dbugs_vuln
Post summary
The post discloses a PostgreSQL pgcrypto heap buffer overflow (CVE-2026-2005) that enables arbitrary code execution and provides a PoC/exploit via GitHub, but it does not report active exploitation or patch information.
⚠️ Vulnerabilidades en productos PostgreSQL ❗ CVE-2026-2004 ❗ CVE-2026-2005 ❗ CVE-2026-2006 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-postgresql/ https://t.co/GCOXi3X40y
Post summary
Three PostgreSQL CVEs (CVE-2026-2004, CVE-2026-2005, CVE-2026-2006) are disclosed; additional information is available via the provided link.
Technical details and GitHub PoC exploits disclosed for PostgreSQL pgcrypto CVE-2026-2005. Low-privilege users can seize root superuser RCE. Patch now! #PostgreSQL #pgcrypto #CyberSecurity #InfoSec #RCE #VulnerabilityAlert #CVE20262005 #PoCExploit https://securityonline.info/postgresql-pgcrypto-vulnerability-cve-2026-2005-poc-exploit-disclosed/ https://t.co/1FNUUNtEjr
Post summary
The post announces a GitHub PoC for CVE‑2026‑2005 that enables RCE from low‑privilege to root, and indicates a patch has been released.
PostgreSQL pgcrypto の RCE 脆弱性 CVE-2026-2005：PoC が登場 https://iototsecnews.jp/2026/05/19/20-year-old-postgresql-flaw-gets-public-poc-exploit-for-remote-code-execution/ PostgreSQL の暗号化エクステンション pgcrypto に見つかった、深刻な脆弱性を解説する記事です。問題の原因は、20 年前からのレガシーコード内に存在する、PGP セッションキー解析時のメモリ管理不備 (ヒープバッファ・オーバーフロー) にあります。この CVE-2026-2005 を悪用する 攻撃者は、メモリ構造を破壊して内部の権限設定を書き換え、データベースのスーパーユーザーを奪取することが可能になります。さらに、正規のデータベース機能を悪用し、サーバ上で任意の OS コマンドをリモート実行する恐れもあります。 すでに PoC コードが公開されているため、 管理者はパッチの適用やアクセス制限などの対策が不可欠です。 #CVE20262005 #PoC #PostgreSQL #Vulnerability
Post summary
本記事は PostgreSQL の pgcrypto 拡張に対する RCE 脆弱性 (CVE-2026-2005) を説明し、ヒープバッファ・オーバーフローによりスーパー ユーザー権限取得と任意 OS コマンド実行が可能であると指摘。 PoC コードが公開されているため、管理者はパッチ適用とアクセス制限を実施すべきと警告している。
PostgreSQL の脆弱性 CVE-2026-2005／2006 が FIX：Wiz の http://ZeroDay.Cloud イベント https://iototsecnews.jp/2026/05/04/wiz-zeroday-cloud-event-reveals-20-year-old-postgresql-vulnerabilities/ 世界中で広く利用されているデータベース PostgreSQL に、20 年近くも前から潜んでいた深刻な脆弱性が発見されました。問題の原因は、データベース内で暗号化や復号を行うためのエクステンション pgcrypto に存在する、データの長さを正しく確認しない不備にあります。具体的には、悪意を持って細工されたメッセージや文字データを処理しようとすると、あらかじめ用意されたメモリの範囲を超えてデータが書き込まれてしまうオーバーフローが発生します (CVE-2026-2005／CVE-2026-2006)。これにより、データベース権限の乗っ取りや、サーバ上での任意のコマンド実行に至る恐れがあります。また、 MariaDB でも、メモリ管理の不具合の脆弱性 (CVE-2026-32710) が見つかっています。ご利用のチームは、ご注意ください。 #CVE20262005 #CVE20262006 #CVE202632710 #PostgreSQL #Vulnerability #ZeroDayCloud
Post summary
The post announces the discovery of long‑hidden PostgreSQL vulnerabilities (CVE‑2026‑2005/2006) that cause buffer overflows and could lead to arbitrary command execution, but provides no PoC, exploit code, patch, or evidence of active exploitation.
The latest Postgres CVEs (fixed in the Feb 12 2026 release: 18.2, 17.8, 16.12, 15.16, 14.21) are: - CVE-2026-2003: oidvector memory disclosure (medium) - CVE-2026-2004: intarray selectivity estimator exec code (high) - CVE-2026-2005: pgcrypto heap buffer overflow exec code (high) - CVE-2026-2006: multibyte char length buffer overrun exec code (high) - CVE-2026-2007: pg_trgm heap buffer overflow (high, 18.x only) AWS RDS/Aurora has no public patches or timeline yet.
Post summary
The post announces five new Postgres CVEs (CVE‑2026‑2003 to CVE‑2026‑2007) with technical details and notes they are fixed in the Feb 12 2026 release; AWS RDS/Aurora currently has no public patches or timeline.
Top 5 Trending CVEs: 1 - CVE-2026-42897 2 - CVE-2026-2005 3 - CVE-2020-25728 4 - CVE-2026-8936 5 - CVE-2026-3910 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post lists five CVEs as trending but provides no technical details, PoC, exploit, patch, or evidence of active exploitation.
『This release fixes 5 security vulnerabilities and over 65 bugs reported over the last several months.』 CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 PostgreSQL: PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 Released! https://www.postgresql.org/about/news/postgresql-182-178-1612-1516-and-1421-released-3235/
Post summary
PostgreSQL has released new versions (18.2, 17.8, 16.12, 15.16, 14.21) that address five security CVEs and over 65 additional bugs.
概念実証（PoC）エクスプロイトが公開されました：20年前のPostgreSQL pgcryptoの脆弱性（CVE-2026-2005）により、完全なスーパーユーザー権限 PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE #DailyCyberSecurity (May 19) https://securityonline.info/postgresql-pgcrypto-vulnerability-cve-2026-2005-poc-exploit-disclosed/
Post summary
A proof‑of‑concept exploit for CVE‑2026‑2005 has been publicly disclosed, demonstrating full superuser RCE via PostgreSQL's pgcrypto module.
PoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE - https://securityonline.info/postgresql-pgcrypto-vulnerability-cve-2026-2005-poc-exploit-disclosed/
Post summary
The post announces a publicly disclosed Proof of Concept exploit for CVE‑2026‑2005, detailing a full superuser remote code execution flaw in PostgreSQL’s pgcrypto, but does not provide exploit code, tooling, or indications of active exploitation.
CVE-2026-2006: Encoding bug in PostgreSQL pgcrypto leads to Remote Code Execution: (article) https://www.zeroday.cloud/blog/postgresql-cve-2026-2005-deep-dive (slides) https://docs.google.com/presentation/d/11wokD_IAO5QFwA0tZzEKfqCI-Ne1iJ3XASnE7SW5zxs/edit?slide=id.p#slide=id.p #cve #vulnerability #zeroday #cybersecurity #informationsecurity #informationsecurity https://t.co/WhrbNP5QB1
Post summary
The post announces a new PostgreSQL pgcrypto encoding bug (CVE-2026-2006) that allows remote code execution, offers links to an article and slides, but does not provide PoC, exploit code, or active exploitation details.
Full Tweet CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit (lab) 0day Intel: CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit (lab) https://t.co
Post summary
The tweet announces a new, lab‑tested PostgreSQL pgcrypto heap overflow that leads to remote code execution, providing basic vulnerability details and a placeholder link.
0day Intel: CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit (lab)
Post summary
A laboratory proof‑of‑concept exploit demonstrates a heap overflow in PostgreSQL's pgcrypto module that could allow remote code execution; no real‑world attacks or patch information are reported.
CVE-2026-2005: CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit (lab) 0day Intel: CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit (lab) https://t.co
Post summary
The tweet signals that a laboratory proof‑of‑concept exploit exists against PostgreSQL’s pgcrypto heap overflow, but no public exploit code or evidence of live attacks is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | postgresql | postgresql | - | - | - |