CVE-2026-116326
HIGH
MEDIUM
Priority: 0.06
BB Relevance:
68/100
Published: 2026-11-12
Modified: 2026-11-14
First seen: 2026-11-12
Status: active
Attack Surface
Network
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
Uncaught exceptions in PostgreSQL plperl allow an object creator to cause use of a stale sigjmp_buf, via a tied Perl object, or a Perl object whose overloaded conversion throws while plperl is handling another error. We have not ruled out arbitrary code execution on some platform. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
Weakness Classification (1)
Affected Software (15)
| Vendor | Product | Version |
|---|---|---|
| n/a | PostgreSQL | 18 < 18.7 |
| n/a | PostgreSQL | 17 < 17.12 |
| n/a | PostgreSQL | 16 < 16.16 |
| n/a | PostgreSQL | 15 < 15.20 |
| n/a | PostgreSQL | 0 < 14.25 |
| n/a | PostgreSQL | 18 < 18.7 |
| n/a | PostgreSQL | 17 < 17.12 |
| n/a | PostgreSQL | 16 < 16.16 |
| n/a | PostgreSQL | 15 < 15.20 |
| n/a | PostgreSQL | 0 < 14.25 |
| n/a | PostgreSQL | 18 < 18.7 |
| n/a | PostgreSQL | 17 < 17.12 |
| n/a | PostgreSQL | 16 < 16.16 |
| n/a | PostgreSQL | 15 < 15.20 |
| n/a | PostgreSQL | 0 < 14.25 |