CVE-2026-120153 | PostgreSQL up to 18.6 PostgreSQL extension sql injection

A vulnerability was found in PostgreSQL up to 14.24/15.19/16.15/17.11/18.6. It has been declared as critical. Impacted is an unknown function of the component PostgreSQL extension. The manipulation results in sql injection.

This vulnerability is identified as CVE-2026-120153. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More