onyx --cves cve-2026-6478
CVE-2026-6478
- score
- <0.1
- cvss
- 6.5
- epss
- 0.6%
- published
- 2026-05-14
- kev added
- —
- first seen
PostgreSQL < 18.4, 17.10, 16.14, 15.18, and 14.23 contains a timing attack vulnerability caused by comparison of MD5-hashed passwords in authentication, letting attackers recover user credentials, exploit requires MD5 password usage.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 38
- https://access.redhat.com/errata/RHSA-2026:27742
- https://access.redhat.com/errata/RHSA-2026:28208
- https://access.redhat.com/security/cve/CVE-2026-6478
- https://bugzilla.redhat.com/show_bug.cgi?id=2477447
- https://access.redhat.com/errata/RHSA-2026:35880
- https://access.redhat.com/errata/RHSA-2026:42555
- https://www.postgresql.org/support/security/CVE-2026-6478/
- https://access.redhat.com/errata/RHSA-2026:27741
- https://access.redhat.com/errata/RHSA-2026:29953
- https://access.redhat.com/errata/RHSA-2026:33441
- https://access.redhat.com/errata/RHSA-2026:44420
- https://access.redhat.com/errata/RHSA-2026:21182
- https://access.redhat.com/errata/RHSA-2026:28037
- https://access.redhat.com/errata/RHSA-2026:28999
- https://access.redhat.com/errata/RHSA-2026:29212
- https://access.redhat.com/errata/RHSA-2026:34043
- https://access.redhat.com/errata/RHSA-2026:49521
- https://access.redhat.com/errata/RHSA-2026:26524
- https://access.redhat.com/errata/RHSA-2026:26561
- https://access.redhat.com/errata/RHSA-2026:22878
- https://access.redhat.com/errata/RHSA-2026:26204
- https://access.redhat.com/errata/RHSA-2026:26525
- https://access.redhat.com/errata/RHSA-2026:33497
- https://access.redhat.com/errata/RHSA-2026:34363
- https://access.redhat.com/errata/RHSA-2026:44481
13 more
- https://access.redhat.com/errata/RHSA-2026:26181
- https://access.redhat.com/errata/RHSA-2026:27718
- https://access.redhat.com/errata/RHSA-2026:27738
- https://access.redhat.com/errata/RHSA-2026:34362
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:27743
- https://access.redhat.com/errata/RHSA-2026:28143
- https://access.redhat.com/errata/RHSA-2026:29815
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6478.json
- https://access.redhat.com/errata/RHSA-2026:26203
- https://access.redhat.com/errata/RHSA-2026:29904
- https://access.redhat.com/errata/RHSA-2026:32983
- https://access.redhat.com/errata/RHSA-2026:32994