CVE-2026-92869

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-92869", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2026-09-17T06:31:54.744Z", "datePublished": "2026-09-30T07:21:09.653Z", "dateUpdated": "2026-09-30T19:41:10.963Z"}, "containers": {"cna": {"affected": [{"vendor": "Pgpool Global Development Group", "product": "Pgpool-II", "defaultStatus": "unaffected", "versions": [{"version": "4.7.0", "status": "affected", "versionType": "semver", "lessThanOrEqual": "4.7.2"}, {"version": "4.6.0", "status": "affected", "versionType": "semver", "lessThanOrEqual": "4.6.7"}, {"version": "4.5.0", "status": "affected", "versionType": "semver", "lessThanOrEqual": "4.5.12"}, {"version": "4.4.0", "status": "affected", "versionType": "semver", "lessThanOrEqual": "4.4.17"}, {"version": "4.3.0", "status": "affected", "versionType": "semver", "lessThanOrEqual": "4.3.20"}, {"version": "3.5.x", "status": "affected", "versionType": "semver", "lessThanOrEqual": "4.2.x"}]}], "descriptions": [{"lang": "en", "value": "An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination."}], "problemTypes": [{"descriptions": [{"description": "Out-of-bounds Write", "lang": "en-US", "cweId": "CWE-787", "type": "CWE"}]}], "references": [{"url": "https://pgpool.net/news/2026-09-29/"}, {"url": "https://jvn.jp/en/jp/JVN22475874/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_0": {"version": "3.0", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}, {"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2026-09-30T07:21:09.653Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-30T19:40:57.866496Z", "id": "CVE-2026-92869", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-30T19:41:10.963Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-92869", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-30T19:40:57.866496Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-30T19:41:04.319Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"vendor": "Pgpool Global Development Group", "product": "Pgpool-II", "versions": [{"status": "affected", "version": "4.7.0", "versionType": "semver", "lessThanOrEqual": "4.7.2"}, {"status": "affected", "version": "4.6.0", "versionType": "semver", "lessThanOrEqual": "4.6.7"}, {"status": "affected", "version": "4.5.0", "versionType": "semver", "lessThanOrEqual": "4.5.12"}, {"status": "affected", "version": "4.4.0", "versionType": "semver", "lessThanOrEqual": "4.4.17"}, {"status": "affected", "version": "4.3.0", "versionType": "semver", "lessThanOrEqual": "4.3.20"}, {"status": "affected", "version": "3.5.x", "versionType": "semver", "lessThanOrEqual": "4.2.x"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://pgpool.net/news/2026-09-29/"}, {"url": "https://jvn.jp/en/jp/JVN22475874/"}], "descriptions": [{"lang": "en", "value": "An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination."}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-787", "description": "Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2026-09-30T07:21:09.653Z"}}}, "cveMetadata": {"cveId": "CVE-2026-92869", "state": "PUBLISHED", "dateUpdated": "2026-09-30T19:41:10.963Z", "dateReserved": "2026-09-17T06:31:54.744Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2026-09-30T07:21:09.653Z", "assignerShortName": "jpcert"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Pgpool-II", "vendor": "Pgpool Global Development Group", "versions": [{"lessThanOrEqual": "4.7.2", "status": "affected", "version": "4.7.0", "versionType": "semver"}, {"lessThanOrEqual": "4.6.7", "status": "affected", "version": "4.6.0", "versionType": "semver"}, {"lessThanOrEqual": "4.5.12", "status": "affected", "version": "4.5.0", "versionType": "semver"}, {"lessThanOrEqual": "4.4.17", "status": "affected", "version": "4.4.0", "versionType": "semver"}, {"lessThanOrEqual": "4.3.20", "status": "affected", "version": "4.3.0", "versionType": "semver"}, {"lessThanOrEqual": "4.2.x", "status": "affected", "version": "3.5.x", "versionType": "semver"}]}], "source": "vultures@jpcert.or.jp"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination."}], "id": "CVE-2026-92869", "lastModified": "2026-09-30T20:17:37.117", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "vultures@jpcert.or.jp", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "vultures@jpcert.or.jp", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-92869", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-30T19:40:57.866496Z", "version": "2.0.3"}}]}, "published": "2026-09-30T08:16:34.877", "references": [{"source": "vultures@jpcert.or.jp", "url": "https://jvn.jp/en/jp/JVN22475874/"}, {"source": "vultures@jpcert.or.jp", "url": "https://pgpool.net/news/2026-09-29/"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "vultures@jpcert.or.jp", "type": "Secondary"}]}

{"bugzilla": {"description": "pgpool-II: pgpool-II: Denial of Service via out-of-bounds write", "id": "2543816", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543816"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination.", "A flaw was found in Pgpool-II. An out-of-bounds write vulnerability allows a remote authenticated attacker to cause a Denial of Service (DoS) by forcing the service to terminate unexpectedly. The issue occurs when the application attempts to write data beyond allocated memory buffer boundaries, resulting in an abnormal process crash."], "mitigation": {"lang": "en:us", "value": "Restrict network exposure by limiting access to the Pgpool-II service port to trusted hosts using firewall rules, or disable the service if Pgpool-II is not required.\n1. Restrict incoming traffic to trusted IP addresses:\n```\nfirewall-cmd --permanent --zone=trusted --add-source=<TRUSTED_IP>\nfirewall-cmd --permanent --remove-port=9999/tcp\nfirewall-cmd --reload\n```\n2. If connection pooling is not required, stop and disable the service:\n```\nsystemctl stop pgpool\nsystemctl disable pgpool\n```\nCaveats:\nRestricting access prevents unauthorized network endpoints from reaching the service. Stopping the service removes connection routing and pooling capabilities, requiring client applications to communicate directly with backend database servers.\nWarning: Applying firewall reload rules or stopping the pgpool service terminates active client sessions and disrupts connection pooling availability."}, "name": "CVE-2026-92869", "public_date": "2026-09-30T07:21:09Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-92869\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92869\nhttps://jvn.jp/en/jp/JVN22475874/\nhttps://pgpool.net/news/2026-09-29/"], "statement": "This vulnerability is rated as Moderate because exploitation requires authenticated network access and is strictly limited to causing a denial of service via process termination, without impacting confidentiality or system integrity. In typical Red Hat Enterprise Linux environments, Pgpool-II is not provided as a core component, substantially limiting exposure to community or specialized installations. The flaw cannot be triggered anonymously, meaning an attacker must possess valid database credentials to force the daemon to crash.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.7.0,4.7.2]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.6.0,4.6.7]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.5.0,4.5.12]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.4.0,4.4.17]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[4.3.0,4.3.20]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[3.5.x,4.2.x]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Pgpool-II", "source": "cna", "vendor": "Pgpool Global Development Group"}, "product": "pgpool-ii", "vendor": "pgpool_global_development_group"}], "created": "2026-09-30T12:15:17.728242+00:00", "title": "Authenticated Out-of-Bounds Write Causing Pgpool-II Process Crash", "updated": "2026-09-30T20:34:09.240787+00:00", "vendors": ["pgpool_global_development_group", "pgpool_global_development_group$PRODUCT$pgpool-ii"]}