EnterpriseDB vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20252
3. 202610

Newest CVEs

• CVE-2026-104949

  WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in…

  EnterpriseDB · WarehousePG

  Low2.3
• CVE-2026-104948

  WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster…

  EnterpriseDB · WarehousePG

  High7.1
• CVE-2026-104947

  WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function…

  EnterpriseDB · WarehousePG

  Medium5.3
• CVE-2026-93853

  Barman snapshot backup deletion trusts unverified backup catalog metadata

  EnterpriseDB · Barman

  High7.2
• CVE-2026-96538

  WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation

  EnterpriseDB · WarehousePG

  High8.7
• CVE-2026-50738

  A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed…

  EnterpriseDB · pglogical

  High7.7
• CVE-2026-50737

  When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber.…

  EnterpriseDB · pglogical

  Critical9.0
• CVE-2026-50736

  The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the…

  EnterpriseDB · pglogical

  Critical9.0
• CVE-2026-50735

  pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting…

  EnterpriseDB · pglogical

  Medium6.1
• CVE-2026-0949

  PEM versions prior to 9.8.1 are affected by a stored Cross-site Scripting (XSS) vulnerability that allows users with access to the Manage Charts menu to inject…

  EnterpriseDB · Postgres Enterprise Manager (PEM)

  Medium6.5