{"uuid": "5323ed55-2a18-43c6-9728-0a00172fdd9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6471", "type": "seen", "source": "https://t.me/VulnerabilityNews/44338", "content": "PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution\n\nPostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server.\n\nThe flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are\nhttps://thehackernews.com/2026/09/postgresql-fixes-12-year-old-logical.html", "creation_timestamp": "2026-09-19T00:00:37.162448Z"}