PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

AI Summary

PostgreSQL released patches fixing 52 vulnerabilities, including CVE-2026-6460 (CVSS 8.8), a 22-year-old type confusion flaw that allows any database user with object-creation privileges to execute arbitrary code on the server with OS-level rights. Full remediation requires not only patching but also rebuilding all C-language extensions installed on the server. Database administrators should prioritize this patch cycle and audit extension inventories immediately.

Read full article → https://thehackernews.com/2026/11/postgresql-patch…

Relevance score: 86.0/100

# More from November 14

1
Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins The Hacker News
2
Trezor Confirms Hidden Implants in CryptoBilis-Sold Wallets That Can Steal Recovery Phrases The Hacker News
3
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files The Hacker News
4
New Mior and Skyfall Attacks Let Rogue Cloud Hosts Steal Secrets From AMD SEV-SNP VMs The Hacker News
6
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access The Hacker News
7
FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls The Hacker News
8
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google SecurityWeek
9
SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users The Hacker News
10
Hackers compromise 4,800 GitHub accounts to steal cloud credentials BleepingComputer