Exposure of PostgreSQL
Databases77
exposure score
10,597
sites use
0
exploited
0
critical
CVEs
111 resultsCVE-2026-6476HIGHPostgreSQL pg_createsubscriber allows SQL injection via subscription nameEPSS 0.3%CVE-2026-14673LOWPostgreSQL amcheck does not clear untrusted search pathEPSS 0.3%CVE-2025-8713LOWPostgreSQL optimizer statistics can expose sampled data within a view, partition, or child tableEPSS 0.3%CVE-2025-12817LOWPostgreSQL CREATE STATISTICS does not check for schema CREATE privilegeEPSS 0.2%CVE-2026-6474MEDIUMPostgreSQL timeofday() can disclose portions of server memoryEPSS 0.2%CVE-2026-14666MEDIUMPostgreSQL row security caching disregards role modificationsEPSS 0.2%CVE-2026-6575MEDIUMPostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats arrayEPSS 0.2%CVE-2026-6638LOWPostgreSQL REFRESH PUBLICATION allows SQL injection via table nameEPSS 0.2%CVE-2026-6472MEDIUMPostgreSQL CREATE TYPE does not check multirange schema CREATE privilegeEPSS 0.2%CVE-2026-14663MEDIUMPostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartextEPSS 0.1%CVE-2026-14681MEDIUMPostgreSQL improper enforcement of GSSAPI encryption when coupled with SSLEPSS 0.1%