Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

cloudnative-pg vulnerabilities

3 published CVEs name cloudnative-pg among the affected products.

Published CVEs
3
Last 12 months
3
Critical
2
Known exploited
0

Critical 2High 1Medium 0Low 0Not scored 0

Newest CVEs

  • CVE-2026-55769

    CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`

    cloudnative-pg · cloudnative-pg

    Critical9.4
  • CVE-2026-55765

    CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod

    cloudnative-pg · cloudnative-pg

    High8.5
  • CVE-2026-44477

    CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

    cloudnative-pg · cloudnative-pg

    Critical9.4

Products with the most CVEs

  1. cloudnative-pg3

Most common weaknesses

  1. CWE-426 2
  2. CWE-250 1
  3. CWE-256 1
  4. CWE-271 1
  5. CWE-522 1