Vuldb Updates

A vulnerability labeled as problematic has been found in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. This impacts an unknown function of the component pltcl/plperl. Such manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2026-14677. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability marked as critical has been reported in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. Affected is the function picksplit of the component pg_trgm. Performing a manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2026-14678. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to type confusion. This vulnerability is tracked as CVE-2026-14680. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, has been found in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. This vulnerability affects unknown code. This manipulation causes stack-based buffer overflow. This vulnerability is registered as CVE-2026-14679. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability has been found in PostgreSQL up to 17.10/18.4 and classified as critical. Impacted is an unknown function of the component GSSAPI. Performing a manipulation results in improper enforcement of message integrity. This vulnerability is reported as CVE-2026-14681. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability was found in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4 and classified as critical. The affected element is the function levenshtein/levenshtein_less_equal of the component fuzzystrmatch. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2026-15742. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability was found in PostgreSQL up to 18.4. It has been classified as problematic. The impacted element is the function pg_restore_attribute_stats. The manipulation leads to type confusion. This vulnerability is traded as CVE-2026-16238. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. It has been declared as critical. This affects the function EXTRACT of the component Deparse. The manipulation results in sql injection. This vulnerability is known as CVE-2026-15741. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability identified as critical has been detected in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. Affected by this vulnerability is an unknown functionality of the component Portal. Performing a manipulation results in type confusion. This vulnerability was named CVE-2026-16239. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. Affected by this issue is the function ascii. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnerability is CVE-2026-18024. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability marked as problematic has been reported in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. This affects an unknown part of the component pg_dump. The manipulation leads to injection. This vulnerability is referenced as CVE-2026-18408. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. This vulnerability affects unknown code of the component pg_dump. The manipulation results in heap-based buffer overflow. This vulnerability is identified as CVE-2026-19385. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability, which was classified as problematic, has been found in PostgreSQL up to 14.23/15.18/16.14/17.10/18.4. The affected element is an unknown function of the component ECPG. Performing a manipulation of the argument bytea results in integer underflow. This vulnerability is cataloged as CVE-2026-16241. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.18.33/7.0.10. It has been declared as very critical. Impacted is the function netfs_unlock_abandoned_read_pages of the component netfs. Executing a manipulation of the argument no_unlock_folio can lead to use after free. This vulnerability appears as CVE-2026-64216. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Roundcube up to 1.6.17/1.7.2. It has been rated as problematic. This impacts an unknown function of the component modoboa driver. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2026-75010. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, was found in Roundcube Webmail up to 1.6.17/1.7.2. This issue affects some unknown processing of the component LDAP Search Filter. Such manipulation leads to ldap injection. This vulnerability is traded as CVE-2026-75007. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability was found in Roundcube Webmail up to 1.6.17/1.7.2. It has been classified as critical. The impacted element is an unknown function of the component CSS Sanitization. The manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2026-75006. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in Roundcube Webmail up to 1.6.17/1.7.2. It has been declared as problematic. This affects an unknown function of the component managesieve plugin. The manipulation results in improper input validation. This vulnerability was named CVE-2026-75004. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in Jeremy Evans Rodauth up to 2.44.x. It has been rated as critical. This affects an unknown part of the component WebAuthn Login. Performing a manipulation results in improper authentication. This vulnerability is reported as CVE-2026-82466. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, was found in LEONT Perl up to 5.45.1. The impacted element is the function S_regmatch of the component Regex Engine. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-15534. The attack may be launched remotely. There is no exploit available. It is advisable to implement a patch to correct this issue.