Kihara-1/postgresql-cve-2026-14662

PoC

PostgreSQL の全文検索(tsvector/tsquery)に見つかった範囲外書き込み脆弱性 CVE-2026-14662 を、修正前(18.4)と修正後(18.6)を Docker で並べて動かして検証した記録と発表資料

view exploit source poc_in_githubauthor Kihara-1published 2026-09-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-14662US	—	0.46% (40th)	Exploit	2026-08-13
Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bound…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.