CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2026-6471

Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Score
7.2 high
Published
2026-08-13
Links
NVD · cve.org

Matched ports (28)

PortPackageVersionStatusMaintainer
databases/postgresql14-clientpostgresql14-client14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-contribpostgresql14-contrib14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-docspostgresql14-docs14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-plperlpostgresql14-plperl14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-plpythonpostgresql14-plpython14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-pltclpostgresql14-pltcl14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-serverpostgresql14-server14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql15-clientpostgresql15-client15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-contribpostgresql15-contrib15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-docspostgresql15-docs15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-plperlpostgresql15-plperl15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-plpythonpostgresql15-plpython15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-pltclpostgresql15-pltcl15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-serverpostgresql15-server15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql16-clientpostgresql16-client16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-contribpostgresql16-contrib16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-docspostgresql16-docs16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-plperlpostgresql16-plperl16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-plpythonpostgresql16-plpython16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-pltclpostgresql16-pltcl16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-serverpostgresql16-server16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql17-clientpostgresql17-client17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-contribpostgresql17-contrib17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-docspostgresql17-docs17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-plperlpostgresql17-plperl17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-plpythonpostgresql17-plpython17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-pltclpostgresql17-pltcl17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-serverpostgresql17-server17.11fixed by updatepgsql@FreeBSD.org

VuXML