CVE-2026-2004

ADVISORY - nist

Summary

Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-1287⁠

Improper Validation of Specified Type of Input

ADVISORY - redhat

CWE-1287⁠

Improper Validation of Specified Type of Input

Impacted images

Advisories

NIST

CREATED

2 days ago

UPDATED

2 days ago

ADVISORY IDCVE-2026-2004⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1287⁠

CVSS SCORE

8.8high

Debian

CREATED

1 day ago

UPDATED

23 hours ago

ADVISORY IDCVE-2026-2004⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

20 hours ago

UPDATED

13 hours ago

ADVISORY IDCVE-2026-2004⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

2 days ago

UPDATED

3 hours ago

ADVISORY IDCVE-2026-2004⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1287⁠

CVSS SCORE

8.8high

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-56rh-463c-rh3h

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-8538-v53m-3g6w

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-gw76-w7wp-wxj7

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-hjh3-p452-jw87

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-hrwf-hchp-xj32

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 hours ago

UPDATED

3 hours ago

ADVISORY ID

MINI-w527-cmvr-jxvh

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY