https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:50:53 +0000 https://vulnerability.circl.lu/vuln/cve-2026-6464 <p><strong>Affected:</strong> PostgreSQL</p> <p>Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the &#34;COPY FROM STDIN&#34; or &#34;\copy FROM STDIN&#34; command fails before the server indicates that it awaits input rows, psql processes the in-line data rows as psql commands. &#34;COPY FROM&#34; with a filename is unaffected. The server administrator has no inherent control over the data rows, so a complete attack requires the attacker to separately acquire control of both the server and the data rows. Alternatively, an attacker controlling data rows alone might complete an attack through a coincidental error that they don&#39;t control. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.</p> <p><strong>Affected:</strong> PostgreSQL</p> <p>Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the &#34;COPY FROM STDIN&#34; or &#34;\copy FROM STDIN&#34; command fails before the server indicates that it awaits input rows, psql processes the in-line data rows as psql commands. &#34;COPY FROM&#34; with a filename is unaffected. The server administrator has no inherent control over the data rows, so a complete attack requires the attacker to separately acquire control of both the server and the data rows. Alternatively, an attacker controlling data rows alone might complete an attack through a coincidental error that they don&#39;t control. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.</p> https://vulnerability.circl.lu/vuln/cve-2026-6464