onyx

onyx --cves cve-2026-16239

CVE-2026-16239

HIGHADV 1PostgreSQL
score
4.6
cvss
8.8
epss
0.7%
published
2026-08-13
kev added
—
first seen

PostgreSQL < 18.5, 17.11, 16.15, 15.19, and 14.24 contains a remote code execution caused by type confusion in portal/cursor lifecycle, letting users execute arbitrary code as the OS user running the database, exploit requires user to recreate cursor with different types.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-08-13 — PublishedP2026-10-16 — First advisory — CERT-FR (avis): Multiples vulnérabilités dans les produits IBM (16 octobre 2026)A2026-10-21 — Tracked by OnyxTscore2026-10-21: score 4.64.6epss2026-09-22: epss 0.5%2026-09-23: epss 0.5%2026-09-24: epss 0.7%2026-09-25: epss 0.7%2026-09-26: epss 0.7%2026-09-27: epss 0.7%2026-09-29: epss 0.7%2026-09-30: epss 0.7%2026-10-01: epss 0.7%2026-10-02: epss 0.7%2026-10-03: epss 0.7%2026-10-04: epss 0.7%2026-10-05: epss 0.7%2026-10-06: epss 0.7%2026-10-07: epss 0.7%2026-10-08: epss 0.7%2026-10-09: epss 0.7%2026-10-10: epss 0.7%2026-10-11: epss 0.7%2026-10-12: epss 0.7%2026-10-13: epss 0.7%2026-10-14: epss 0.7%2026-10-15: epss 0.7%2026-10-16: epss 0.7%2026-10-18: epss 0.7%2026-10-19: epss 0.7%2026-10-20: epss 0.7%2026-10-21: epss 0.7%0.7%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. First advisory — CERT-FR (avis) Multiples vulnérabilités dans les produits IBM (16 octobre 2026)
  3. Tracked by Onyx

Advisories

1 feed this week

Weaknesses

CWE-843

References 1