[UPDATE] [hoch] PostgreSQL: Mehrere Schwachstellen

highCVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PostgreSQL ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen und nicht näher bezeichnete Angriffe durchzuführen, was möglicherweise zu einer Ausweitung der Berechtigungen führen kann.

CSIRTS triage

vendor: PostgreSQL product: PostgreSQL Information disclosure Remote code execution Privilege escalationOther

What: Multiple vulnerabilities in PostgreSQL can be exploited to disclose information, execute arbitrary code, and conduct unspecified attacks, potentially leading to privilege escalation.
Who is affected: Remote, authenticated or anonymous attackers can exploit these vulnerabilities in PostgreSQL deployments.
Urgency: Remediation is urgent due to the high severity and potential for exploitation.
Action: Apply the latest security patches provided by PostgreSQL.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch PostgreSQL

Get an email when a new PostgreSQL advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: high
Published: 2026-09-04
Exploitation: Not in CISA KEV at last sync

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0409

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-20030.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all EPSS-scored CVEs.
Moderate exploitation riskCVE-2026-20041.2% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 66% of all EPSS-scored CVEs.
Moderate exploitation riskCVE-2026-20051.3% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 68% of all EPSS-scored CVEs.
Moderate exploitation riskCVE-2026-20061.1% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 63% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-20070.48% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-2003	coverage & exploitation status	NVD · CVE.org
CVE-2026-2004	coverage & exploitation status	NVD · CVE.org
CVE-2026-2005	coverage & exploitation status	NVD · CVE.org
CVE-2026-2006	coverage & exploitation status	NVD · CVE.org
CVE-2026-2007	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[UPDATE] [hoch] Splunk SOAR: Mehrere Schwachstellencert-bund
unknownNCSC-2026-0321 [1.00] [M/H] Meerdere kwetsbaarheden verholpen in IBM AIX en IBM PowerVM VIOSncsc-nl
unknownexploitedMultiple vulnerabilities in IBM products (August 21, 2026)cert-fr-avis
unknownMultiple vulnerabilities in Splunk products (20 August 2026)cert-fr-avis
unknownMultiple vulnerabilities in Tenable products (August 4, 2026)cert-fr-avis
unknownMultiple vulnerabilities in IBM products (July 31, 2026)cert-fr-avis
unknownMultiple vulnerabilities in IBM products (July 24, 2026)cert-fr-avis
unknownMultiple vulnerabilities in Tenable Security Center (July 21, 2026)cert-fr-avis