onyx

onyx --cves cve-2026-16241

CVE-2026-16241

LOWADV 1PostgreSQL
score
4.5
cvss
3.8
epss
0.2%
published
2026-08-13
kev added
—
first seen

PostgreSQL < 18.5, 17.11, 16.15, 15.19, and 14.24 contains an integer underflow caused by sending a bytea value lacking the mandatory prefix in ECPG client, letting database server administrators cause temporary denial of service, exploit requires database server admin privileges.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-08-13 — PublishedP2026-10-16 — First advisory — CERT-FR (avis): Multiples vulnérabilités dans les produits IBM (16 octobre 2026)A2026-10-21 — Tracked by OnyxTscore2026-10-21: score 4.54.5epss2026-09-22: epss 0.2%2026-09-23: epss 0.2%2026-09-24: epss 0.2%2026-09-25: epss 0.2%2026-09-26: epss 0.2%2026-09-27: epss 0.2%2026-09-29: epss 0.2%2026-09-30: epss 0.2%2026-10-01: epss 0.2%2026-10-02: epss 0.2%2026-10-03: epss 0.2%2026-10-04: epss 0.2%2026-10-05: epss 0.2%2026-10-06: epss 0.2%2026-10-07: epss 0.2%2026-10-08: epss 0.2%2026-10-09: epss 0.2%2026-10-10: epss 0.2%2026-10-11: epss 0.2%2026-10-12: epss 0.2%2026-10-13: epss 0.2%2026-10-14: epss 0.2%2026-10-15: epss 0.2%2026-10-16: epss 0.2%2026-10-18: epss 0.2%2026-10-19: epss 0.2%2026-10-20: epss 0.2%2026-10-21: epss 0.2%0.2%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. First advisory — CERT-FR (avis) Multiples vulnérabilités dans les produits IBM (16 octobre 2026)
  3. Tracked by Onyx

Advisories

1 feed this week

Weaknesses

CWE-191

References 1