{"vulnerability": "CVE-2026-87911", "sightings": [{"uuid": "772d1a0b-0280-4735-a7bd-ac1656037c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87911", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4gnlpu7723", "content": "\ud83d\udd34 CVE-2026-87911 - Critical (9.6)\n\nAn OS command injection weakness in the read-only enforcement of the SQL validation component in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87911/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-09T21:01:20.914402Z"}, {"uuid": "ab04d177-2976-4815-947c-82f1ba4408c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87911", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fesvv2zo64rnp", "content": "CVE-2026-87911 - Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server\nCVE ID : CVE-2026-87911\n \n Published : Sept. 9, 2026, 8:21 p.m. | 38\u00a0minutes ago\n \n Description : An OS command injec...", "creation_timestamp": "2026-09-09T21:05:52.199312Z"}, {"uuid": "97a42590-43dc-4350-9970-3d1cebc472b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87911", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4nttvkrj2g", "content": "CVE-2026-87911 - aws labs postgres mcp server\nThe PostgreSQL management component can be tricked into running system commands when a specially crafted request is processed. This could let an attacker control the server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aws #CVE #infosec", "creation_timestamp": "2026-09-09T23:10:05.559879Z"}, {"uuid": "881f42b9-11a3-40ce-bb34-c8bd2d3cfc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87911", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mv5ermslaz2f", "content": "CRITICAL: AWS Labs postgres MCP Server (<1.1.7) hit by OS command injection (CVE-2026-87911) \ud83d\udea8. Unauthenticated attackers can execute OS commands. Upgrade to v1.1.7+ now. https://radar.offseq.com/threat/cve-2026-87911-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-com...", "creation_timestamp": "2026-09-10T06:00:28.372809Z"}, {"uuid": "481e3c1e-901f-43df-914c-8705c6a06ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87911", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117245216364198610", "content": "CVE-2026-87911 (CVSS 9.6): CRITICAL OS command injection in AWS Labs postgres MCP Server (<1.1.7). Unauthenticated attackers can execute OS commands via crafted SQL. Upgrade to 1.1.7+ ASAP. https://radar.offseq.com/threat/cve-2026-87911-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-5896283731c57124 #OffSeq #AWS #PostgreSQL #Vuln", "creation_timestamp": "2026-09-10T06:00:35.828500Z"}]}