Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE

A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any C-language extensions installed on the server. The flaw, tracked as CVE-2026-6460, has a CVSS score of 8.8. Any code run this way has the rights of the operating
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE
TN

The Hacker News

19h ago
0 0

Discussion

Take the lead—comment now

Lead the way—your insights can inspire others.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

schneier.com
Friday Squid Blogging: Pacific Flying Squid Populations Droppin…

Climate change is the issue. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moder…
SS

Schneier on Security

14h ago
0
bleepingcomputer.com
Trezor confirms crypto-stealing implants in three wallets, rele…

Cryptocurrency hardware wallet maker Trezor has confirmed that three Safe 5 devices sold by Southeast Asian reseller CryptoBilis contained malicious hardware i…
Giulia

Giulia

15h ago
0
darkreading.com
Attackers in Binance Breach Targeted Known Weakness, Missing Co…

Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.
DR

Dark Reading

22h ago
0
thehackernews.com
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Depl…

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then…
JA

jordan af

1d ago
0
bleepingcomputer.com
New worm-like 'SCKit' malware targets MSPs in ScreenConnect att…

A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread fro…
Rosa Martinez

Rosa Martinez

1d ago
0
bleepingcomputer.com
Hackers compromise 4,800 GitHub accounts to steal cloud credent…

A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4, 837 compromised accounts to probe 61, 764 repositories, open pull requests,…
MB

Maria Bakker

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Depl…

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then…
JA

jordan af

1d ago
0
thehackernews.com
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Ac…

Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The com…
EK

Emma Klein

1d ago
0
thehackernews.com
Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagg…

A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if…
Marcus Allen

Marcus Allen

2d ago
0
thehackernews.com
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers…

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects vers…
TN

The Hacker News

2d ago
0
thehackernews.com
Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote…

Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege…
Thanakorn Boon

Thanakorn Boon

2d ago
0
thehackernews.com
Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confid…

Of the 37, 571 Grok-built apps that security company Claroc found online, 35, 578 were open to anyone without a sign-in, the researchers said yesterday. They…
Thanakorn Boon

Thanakorn Boon

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest