CVE-2026-119922

Vendor

AWS

Product

babelfish-for-postgresql

CVSS v3.1

8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-266

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   AWS bulletin AWS 3h ago

   CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

   Bulletin ID: 2026-165-AWS Publication Date: 11/03/2026 10:00 AM PST Description: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 allows remote authenticated…

   CVE-2026-119922 Amazon Web Services
2. 36
   CVE NVD 2h ago

   Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote…

   Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you…

   CVSS 8.8 CVE-2026-119922 AWS