PG
Product
Pgpool-II
8
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 1High 4Medium 3Low 0
Watch
Add Pgpool-II to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92869 | 6.5 | Sep 30 | An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination Affected: 4.7.0 through 4.7.2; 4.6.0 through 4.6.7; 4.5.0 through 4.5.12; 4.4.0 through 4.4.17; 4.3.0 through 4.3.20; 3.5.x through 4.2.x |
| CVE-2026-92868 | 6.5 | Sep 30 | An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication Affected: 4.7.0 through 4.7.2; 4.6.0 through 4.6.7; 4.5.0 through 4.5.12; 4.4.0 through 4.4.17; 4.3.0 through 4.3.20; 4.0.x through 4.2.x |
| CVE-2026-92872 | 4.3 | Sep 30 | Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information Affected: 4.7.0 through 4.7.2; 4.6.0 through 4.6.7; 4.5.0 through 4.5.12; 4.4.0 through 4.4.17; 4.3.0 through 4.3.20; 3.5.x through 4.2.x |
Showing 3