CVE-2026-116325

ADVISORY - nist

Summary

SQL injection in PostgreSQL reindexdb allows an object creator to execute arbitrary SQL as the database user running reindexdb, via a crafted index name embedded in the parallel catalog query for --jobs with --index. Within major versions 17-18, minor versions before PostgreSQL 18.7 and 17.12 are affected. Versions before PostgreSQL 17 are unaffected.

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-89⁠

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

ADVISORY - redhat

CWE-89⁠

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Impacted images

Advisories

NIST

CREATED

20 hours ago

UPDATED

16 hours ago

ADVISORY IDCVE-2026-116325⁠

EXPLOITABILITY SCORE

2.1

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

8high

Alpine

CREATED

11 hours ago

UPDATED

15 minutes ago

ADVISORY IDCVE-2026-116325⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

13 hours ago

UPDATED

7 hours ago

ADVISORY IDCVE-2026-116325⁠

EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Red Hat

CREATED

21 hours ago

UPDATED

8 hours ago

ADVISORY IDCVE-2026-116325⁠

EXPLOITABILITY SCORE

2.1

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)

CVSS SCORE

8high

Docker Hardened Images

CREATED

9 hours ago

UPDATED

9 hours ago

ADVISORY IDDHI-wokn-vqdo-px6d-n2lg⁠

EXPLOITABILITY SCORE

2.1

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

8high