PG
Vendor
Pgpool Global Development Group
8
CVEs
0
On KEV
7
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-92873 | PG Pgpool-II Pgpool Global Development Group | 7.3 | Sep 30 | Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node |
| CVE-2026-92872 | PG Pgpool-II Pgpool Global Development Group | 4.3 | Sep 30 | Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information |
| CVE-2026-92871 | PG Pgpool-II Pgpool Global Development Group | 7.5 | Sep 30 | A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process |
| CVE-2026-92870 | PG Pgpool-II Pgpool Global Development Group | 7.5 | Sep 30 | A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination |
| CVE-2026-92869 | PG Pgpool-II Pgpool Global Development Group | 6.5 | Sep 30 | An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination |
| CVE-2026-92868 | PG Pgpool-II Pgpool Global Development Group | 6.5 | Sep 30 | An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication |
| CVE-2026-92867 | PG Pgpool-II Pgpool Global Development Group | 8.8 | Sep 30 | An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution |
| CVE-2025-46801 | PG Pgpool-II PgPool Global Development Group | 9.8 | May 19 | Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability |