PostgreSQL

Product

Am I affected?

Checked against NVD affected-version data on our server. Nothing you type is stored.

Security timeline

3 November 2026Vulnerability reported by AWS Security BulletinsAWS warns of privilege escalation flaw CVE-2026-119922 in Babelfish for PostgreSQL
3 November 2026Vulnerability reported by Canadian Centre for Cyber SecurityPostgreSQL advisory flags two flaws in psqlODBC versions before 18.00.0006

Recent news

AWS Security Bulletins· 6h

AWS warns of privilege escalation flaw CVE-2026-119922 in Babelfish for PostgreSQL

AWS has issued security bulletin 2026-165-AWS for CVE-2026-119922, an improper access control flaw in the Babelfish for PostgreSQL extension. Remote authenticated users can elevate their privileges. AWS recommends upgrading to fixed extension versions, though the article excerpt does not list them.

Am I affected?1

Canadian Centre for Cyber Security· 10h

PostgreSQL advisory flags two flaws in psqlODBC versions before 18.00.0006

PostgreSQL advisory AV26-1115, dated 3 November 2026, covers two vulnerabilities in psqlODBC prior to 18.00.0006: a large-object read that overflows the application buffer, and a stack buffer overflow in the ODBC escape parser. The Canadian Centre for Cyber Security urges users and administrators to review the linked PostgreSQL security information and apply updates as they become available.

Am I affected?1