{"uuid": "7163ba36-b350-42d9-9a75-1972bb581cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6471", "type": "seen", "source": "https://thehackernews.com/2026/09/postgresql-fixes-12-year-old-logical.html", "content": "PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server.\n\nThe flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are", "creation_timestamp": "2026-09-04T19:00:35.877470Z"}