CVE-2026-6460

Vendor

Debian

Product

PostgreSQL

CVSS v3.1

8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-843

Exposure class

Operating system, Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   Debian advisory Debian 16h ago

   postgresql-17 - security update

   Multiple security issues were discovered in PostgreSQL, which may result in execution of arbitrary code, incorrect authentication, information disclosure, denial of service or privilege escalation. To completely fix CVE-2026-6460…

   CVE-2026-6460 Debian
2. 21
   CVE NVD 25h ago

   Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running the database, via ALTER ...

   Type confusion in PostgreSQL allows an object creator to execute arbitrary code as the operating system user running the database, via ALTER ... SET DATA TYPE primarily. Other DDL attack routes exist, such as "ALTER TABLE ... ADD…

   CVSS 8.8 CVE-2026-6460