WID-SEC-W-2026-3807

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

PostgreSQL JDBC Driver: Mehrere Schwachstellen

view advisory published 2026-10-07

Ein Angreifer kann mehrere Schwachstellen in PostgreSQL JDBC Driver ausnutzen, um Daten zu manipulieren, und um Informationen offenzulegen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2026-107315US——
pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and t…
CVE-2026-107314US——
pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection property excludes all six authentication methods the dri…
CVE-2026-107313US——
pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a value on a connection with GSS…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan