CVE-2026-18546

Vendor

IBM

Product

CockroachDB PostgreSQL for IBM VPC

CVSS v3.1

5.4 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness

CWE-918

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 23
   CVE NVD 2h ago

   IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to server-side request…

   IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized…

   CVSS 5.4 CVE-2026-18546 IBM