A critical PostgreSQL vulnerability dubbed PostGREShell could allow low-privileged replication accounts to execute attacker-controlled code, escalate to database superuser, and establish persistent backdoors on affected servers. Tracked as CVE-2026-6471, the flaw reportedly affected PostgreSQL releases from version 9.4 onward, leaving a dangerous plugin-loading path exposed for roughly 12 years. Cyera Research disclosed the issue on […]

The post 12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code and Take Over Database Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Eswar

Source: gbHackers
Source Link: https://gbhackers.com/12-year-old-postgresql-flaw/