PostgreSQL Multiple Vulnerabilities

CSIRTS triage

What

Multiple vulnerabilities have been discovered in PostgreSQL.

Who is affected

PostgreSQL deployments of unspecified versions.

Urgency

Urgency unknown; no severity, CVSS, or exploitation data provided.

Action

Check PostgreSQL security advisories for affected versions and apply patches for CVE-2026-6472 through CVE-2026-6479.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

HKCERT Security Bulletins (HK · national-cert · site)

Severity

unknown

Published

2026-08-10

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.hkcert.org/security-bulletin/postgresql-multiple-vulnerabilities_20260810

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-64720.16% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all EPSS-scored CVEs.
• Moderate exploitation riskCVE-2026-64731.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 60% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-64740.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-64750.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 25% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-64760.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 21% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-64770.45% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 38% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-64780.56% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-64790.47% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-65750.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 11% of all EPSS-scored CVEs.
• Low exploitation riskCVE-2026-66370.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• high[UPDATE] [high] PostgreSQL: Multiple vulnerabilitiescert-bund
• unknownNCSC-2026-0321 [1.00] [M/H] Multiple vulnerabilities fixed in IBM AIX and IBM PowerVM VIOSncsc-nl
• unknownexploitedMultiple vulnerabilities in IBM products (August 21, 2026)cert-fr-avis
• unknownMultiple vulnerabilities in Splunk products (20 August 2026)cert-fr-avis
• unknownMultiple vulnerabilities in Tenable products (August 4, 2026)cert-fr-avis
• unknownF5 Products Multiple Vulnerabilitieshkcert
• unknownMultiple vulnerabilities in Tenable Security Center (July 21, 2026)cert-fr-avis
• unknownMultiple vulnerabilities in Stormshield Management Center (June 29, 2026)cert-fr-avis

More from HKCERT Security Bulletins

• unknownGoogle Chrome Multiple Vulnerabilities2026-08-26
• unknownVeeam Backup & Replication Information Disclosure Vulnerability2026-08-26
• unknownZimbra Multiple Vulnerabilities2026-08-24
• unknownMicrosoft Edge Multiple Vulnerabilities2026-08-24
• unknownGoogle Chrome Multiple Vulnerabilities2026-08-21