AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-16239

HIGH · CVSS 8.8 EPSS 0.59%

Source: NVD + CISA KEV + EPSS · Published 2026-08-13 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A type confusion vulnerability in PostgreSQL allows an attacker to execute arbitrary code with the privileges of the operating system user running the database by manipulating the cursor lifecycle. This issue affects versions prior to 18.5, 17.11, 16.15, 15.19, and 14.24. Database administrators and organizations using these affected PostgreSQL versions should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-16239
Severity
HIGH
CVSS
8.8
EPSS
0.59%

Original NVD Description

Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.