CYBER● ELEVATED2h ago · Sep 4, 2026, 3:20 PM

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

The Hacker News · global

PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary code as the operating-system user running the database server. The flaw, tracked as CVE-2026-6471 (CVSS score: 7.2), has been present since logical decoding was introduced in PostgreSQL 9.4 in 2014. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are

Read at The Hacker News Ask the Analyst about this

GlobeAlert aggregates and classifies open sources; the story above belongs to its publisher. Summaries are machine-generated from the source text.

More in Cyber

CYBERnow[Virtual Event] What Every Enterprise Should Know About Securing Cloud Assets in the Age of AIDark Reading CYBERnow[Virtual Event] Building a Secure AI Strategy for the EnterpriseDark Reading CYBER1h agoUsing a VM to Contain an AI AgentSchneier CYBER1h agoCompanies Have Six Months to Prepare for Automated AttacksDark Reading