Sign In

CVE-2026-116318

ADVISORY - nist

Summary

SQL injection in PostgreSQL pg_dump allows an object creator to execute arbitrary SQL as the user restoring the dump, via an inherited column having a child-local not-null constraint whose name requires quoting. Within major version 18, minor versions before PostgreSQL 18.7 are affected. Versions before PostgreSQL 18 are unaffected.

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-89⁠

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

ADVISORY - redhat

CWE-89⁠

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Impacted images

Advisories

NIST

CREATED

UPDATED

ADVISORY IDCVE-2026-116318⁠
EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-89⁠

CVSS SCORE

8.8high

Alpine

CREATED

UPDATED

ADVISORY IDCVE-2026-116318⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

UPDATED

ADVISORY IDCVE-2026-116318⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY

Red Hat

CREATED

UPDATED

ADVISORY IDCVE-2026-116318⁠
EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-89⁠

CVSS SCORE

8.8high

Docker Hardened Images

CREATED

UPDATED

ADVISORY IDDHI-j2fv-d2yo-5zex-zduj⁠
EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

8.8high