Vulnerabilidades de Pgpool Global Development Group
CVEs publicadas que afetam produtos de Pgpool Global Development Group: 7 registro(s), com severidade, exploração e correções.
CVE-2026-92873
Alta · 7.3
CWE-303 30/09/2026
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may…
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.
CVE-2026-92872
Média · 4.3
CWE-532 30/09/2026
Insertion of Sensitive Information into Log File em Pgpool Global Development Group Pgpool-II
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information.
CVE-2026-92871
Alta · 7.5
CWE-476 30/09/2026
NULL Pointer Dereference em Pgpool Global Development Group Pgpool-II
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.
CVE-2026-92870
Alta · 7.5
CWE-121 30/09/2026
Stack-based Buffer Overflow em Pgpool Global Development Group Pgpool-II
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination.
CVE-2026-92869
Média · 6.5
CWE-787 30/09/2026
Out-of-bounds Write em Pgpool Global Development Group Pgpool-II
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination.
CVE-2026-92868
Média · 6.5
CWE-295 30/09/2026
Improper Certificate Validation em Pgpool Global Development Group Pgpool-II
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication.
CVE-2026-92867
Alta · 8.8
CWE-787 30/09/2026
Out-of-bounds Write em Pgpool Global Development Group Pgpool-II
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution.