CVE-2026-87911

Vendor

Amazon Web Services

Product

PostgreSQL

CVSS

9.6

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 28
   CVE NVD 9 Sep 2026

   An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7…

   An OS command injection weakness in the read-only enforcement of the SQL validation component in Amazon awslabs postgres-mcp-server before 1.1.7 might allow an unauthenticated actor to execute operating system commands on the…

   CVSS 9.6 Fix available CVE-2026-87911
2. 14
   AWS bulletin AWS 7d ago

   CVE-2026-87911

   CVE-2026-87911 Amazon Web Services