onyx

onyx --cves cve-2026-14673

CVE-2026-14673

LOWADV 1PostgreSQL
score
4.5
cvss
3.8
epss
0.2%
published
2026-08-13
kev added
—
first seen

PostgreSQL 14 < 14.24, 15 < 15.19, 16 < 16.15, and 18 < 18.5 contain a command injection caused by untrusted search path in amcheck function, letting grantees with EXECUTE privilege run arbitrary functions as expression index owners, exploit requires EXECUTE privilege on amcheck.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-08-13 — PublishedP2026-10-16 — First advisory — CERT-FR (avis): Multiples vulnérabilités dans les produits IBM (16 octobre 2026)A2026-10-21 — Tracked by OnyxTscore2026-10-21: score 4.54.5epss2026-09-22: epss 0.2%2026-09-23: epss 0.2%2026-09-24: epss 0.2%2026-09-25: epss 0.2%2026-09-26: epss 0.2%2026-09-27: epss 0.2%2026-09-29: epss 0.2%2026-09-30: epss 0.2%2026-10-01: epss 0.2%2026-10-02: epss 0.2%2026-10-03: epss 0.2%2026-10-04: epss 0.2%2026-10-05: epss 0.2%2026-10-06: epss 0.2%2026-10-07: epss 0.2%2026-10-08: epss 0.2%2026-10-09: epss 0.2%2026-10-10: epss 0.2%2026-10-11: epss 0.2%2026-10-12: epss 0.2%2026-10-13: epss 0.2%2026-10-14: epss 0.2%2026-10-15: epss 0.2%2026-10-16: epss 0.2%2026-10-18: epss 0.2%2026-10-19: epss 0.2%2026-10-20: epss 0.2%2026-10-21: epss 0.2%0.2%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. First advisory — CERT-FR (avis) Multiples vulnérabilités dans les produits IBM (16 octobre 2026)
  3. Tracked by Onyx

Advisories

1 feed this week

Weaknesses

CWE-426

References 1