CVE-2026-96538 | EnterpriseDB WarehousePG up to 7.5.x adminpack postgresql.auto.conf authorization

September 28, 2026 Yanac

A vulnerability classified as critical has been found in EnterpriseDB WarehousePG up to 7.5.x. Affected by this vulnerability is the function pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls of the file postgresql.auto.conf of the component adminpack. Performing a manipulation results in missing authorization.

This vulnerability is identified as CVE-2026-96538. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More