AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-14670

HIGH · CVSS 8.8 EPSS 0.60%

Source: NVD + CISA KEV + EPSS · Published 2026-08-13 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A heap buffer overflow vulnerability in PostgreSQL's plperl allows an attacker to execute arbitrary code with the privileges of the database's operating system user by crafting a malicious function body. This poses a significant risk to database integrity and security, particularly for organizations using affected versions prior to 18.5, 17.11, 16.15, 15.19, and 14.24. Database administrators and security teams should prioritize patching to mitigate potential exploitation.

CVE
CVE-2026-14670
Severity
HIGH
CVSS
8.8
EPSS
0.60%

Original NVD Description

Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.