Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applications that pass gigabyte-scale user inputs to the relevant database functions, the application input provider may achieve a segmentation fault. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-14 | 1 | Disclosure1 |
| 2026-05-21 | 1 | Disclosure1 |
| 2026-06-03 | 1 | Disclosure1 |
| 2026-06-23 | 1 | Patch1 |
🚨 ATENÇÃO SysAdmins! RLSA-2026:28143 corrige falhas CRÍTICAS no PostgreSQL 16/Rocky 8: CVE-2026-6473 (RCE) e CVE-2026-6478 (timing attack). Saiba mais: -> http://tinyurl.com/u5jet86v https://t.co/LvL0iwIct4
Post summary
The tweet announces that critical CVE‑2026‑6473 (RCE) and CVE‑2026‑6478 (timing attack) vulnerabilities in PostgreSQL 16/Rocky 8 have been fixed, with a link for further details.
CVE-2026-6473: PostgreSQL Integer Wraparound Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04jVhMH0
Post summary
The text announces CVE-2026-6473, a PostgreSQL integer wraparound flaw, and highlights the need for businesses to respond to the disclosed vulnerability.
⚠️ Vulnerabilidades en productos PostgreSQL ❗ CVE-2026-6477 ❗ CVE-2026-6475 ❗ CVE-2026-6473 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-postgresql-2/ https://t.co/yHbC0kfr1p
Post summary
The post lists three PostgreSQL CVEs (CVE-2026-6477, CVE-2026-6475, CVE-2026-6473) and directs readers to a website for further information.
⚠️ HIGH — CVE-2026-6473 Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to u… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-6473 #PostgreSQL #CyberSecurity #InfoSec
Post summary
High severity PostgreSQL CVE‑2026‑6473 involves an integer wraparound flaw that could be triggered by an unprivileged user, with analysis available but no PoC or exploit details disclosed.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | postgresql | postgresql | - | - | - |