Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
PgBouncer 1.25.2 released - Human touch with fresh twist in title race full of uncertainties (including CVE-2026-6664, CVE-2026-6665, Fix CVE-2026-6666, CVE-2026-6667) https://www.pgbouncer.org/changelog.html#pgbouncer-125x
Post summary
PgBouncer 1.25.2 has been released, fixing CVE‑2026‑6666 and referencing additional CVEs, with a link to the changelog for further details.
⚡ New CVE Alert: CVE-2026-6666 📊 Severity: 5.9 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-6666 #CVE-2026-6666 #CVE #Medium #CyberSecurity #InfoSec https://t.co/A11p4LLyoX
Post summary
The tweet announces the new CVE-2026-6666 with a medium severity score, but offers no further details beyond a link to the NVD entry.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pgbouncer | pgbouncer | - | - | - |