CVE-2026-107314 | PostgreSQL pgjdbc up to 42.7.13 Authentication requireAuth missing encryption

October 8, 2026 Yanac

A vulnerability categorized as problematic has been discovered in PostgreSQL pgjdbc up to 42.7.13. This affects an unknown function of the component Authentication. Executing a manipulation of the argument requireAuth can lead to missing encryption of sensitive data.

This vulnerability is tracked as CVE-2026-107314. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More