Out-of-Bounds Write Vulnerability in Pgpool-II by Pgpool Global Development Group
CVE-2026-92867
8.7HIGH
Key Information:
- Status
- Vendor
- CVE Published:
- 30 September 2026
What is CVE-2026-92867?
An out-of-bounds write vulnerability in Pgpool-II enables an authenticated attacker to potentially disrupt service operations by causing abnormal process termination or even executing arbitrary code. This risk underscores the importance of securing your Pgpool-II deployments and ensuring that all systems are updated to mitigate potential exploitation.
Affected Version(s)
Pgpool-II 4.7.0 <= 4.7.2
Pgpool-II 4.6.0 <= 4.6.7
Pgpool-II 4.5.0 <= 4.5.12
References
CVSS V4
Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
CVSS V3.0
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved