Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-92867

pgpool-II: Pgpool-II: arbitrary code execution via out-of-bounds write

An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Pgpool Global Development Group
Products
Pgpool-ii
CVE-2026-92868

pgpool-II: pgpool-II: Authentication bypass via improper certificate validation

An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Pgpool Global Development Group
Products
Pgpool-ii
CVE-2026-92869

pgpool-II: pgpool-II: Denial of Service via out-of-bounds write

An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Pgpool Global Development Group
Products
Pgpool-ii
CVE-2026-92870

pgpool-II: pgpool-II: Denial of Service via stack-based buffer overflow

A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Pgpool Global Development Group
Products
Pgpool-ii
CVE-2026-92871

Unauthenticated NULL Pointer Dereference in Pgpool-II Watchdog Process Causes Denial of Service

A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Pgpool Global Development Group
Products
Pgpool-ii
CVE-2026-92872

pgpool-II: pgpool-II: Information disclosure via log files

Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Pgpool Global Development Group
Products
Pgpool-ii
CVE-2026-92873

Unauthenticated Promotion of Watchdog Nodes to Leader in Pgpool‑II

Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Pgpool Global Development Group
Products
Pgpool-ii