Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password which could have been exploited by a remote attacker to gain full administrative access to the database. Exploitation required network access to the AlloyDB cluster and was limited to Terraform or the REST API, as other clients blocked it.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7428 Insecure Default Password in Google Cloud AlloyDB for PostgreSQL Prior to 2025-11-03 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7428
Post summary
The post discloses CVE-2026-7428, noting an insecure default password vulnerability in Google Cloud AlloyDB for PostgreSQL prior to 2025‑11‑03, but offers no proof of concept, exploit, or mitigation details.