High severity8.8NVD Advisory· Published Aug 13, 2026· Updated Aug 29, 2026
CVE-2026-16238
CVE-2026-16238
Description
Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before PostgreSQL 18 are unaffected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
43- osv-coords42 versionspkg:rpm/almalinux/postgresql18-server-develpkg:rpm/almalinux/postgresql18-upgrade-develpkg:rpm/almalinux/postgresql-plpython3pkg:rpm/almalinux/postgresql18pkg:rpm/almalinux/postgresql-upgradepkg:rpm/almalinux/postgis-docspkg:rpm/almalinux/postgresql18-private-libspkg:rpm/almalinux/pg_repackpkg:rpm/almalinux/postgresql-upgrade-develpkg:rpm/almalinux/postgresql18-plpython3pkg:rpm/almalinux/postgresql18-serverpkg:rpm/almalinux/postgresql18-upgradepkg:rpm/almalinux/postgis-utilspkg:rpm/almalinux/postgresql-contribpkg:rpm/almalinux/postgresql-plperlpkg:rpm/almalinux/postgresql-pltclpkg:rpm/almalinux/postgresql-private-libspkg:rpm/almalinux/postgresql-serverpkg:rpm/almalinux/postgresql18-private-develpkg:rpm/almalinux/postgresql18-staticpkg:rpm/almalinux/postgis-upgradepkg:rpm/almalinux/postgresqlpkg:rpm/almalinux/postgresql-docspkg:rpm/almalinux/postgresql-private-develpkg:rpm/almalinux/postgresql-server-develpkg:rpm/almalinux/postgresql-staticpkg:rpm/almalinux/postgresql-testpkg:rpm/almalinux/postgresql-test-rpm-macrospkg:rpm/almalinux/pgauditpkg:rpm/almalinux/postgispkg:bitnami/postgresqlpkg:rpm/almalinux/postgresql18-contribpkg:rpm/almalinux/postgresql18-docspkg:rpm/almalinux/postgresql18-plperlpkg:rpm/almalinux/postgresql18-testpkg:rpm/opensuse/postgresql18-mini&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/postgresql18&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql18&distro=openSUSE%20Leap%2016.0pkg:rpm/almalinux/postgresql18-test-rpm-macrospkg:rpm/almalinux/postgis-clientpkg:rpm/almalinux/pgvectorpkg:rpm/almalinux/postgres-decoderbufs
< 18.6-1.el10_2+ 41 more
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 1.5.3-1.module_el9.8.0+234+5456f35d
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.0-1.module_el9.8.0+234+5456f35d
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: >= 18.0.0, < 18.5.0
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-160000.1.1
- (no CPE)range: < 18.6-1.1
- (no CPE)range: < 18.6-160000.1.1
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: < 0.8.1-1.module_el9.8.0+234+5456f35d
- (no CPE)range: < 3.3.1-1.Final.module_el9.8.0+234+5456f35d
- Range: <18.6
Patches
Vulnerability mechanics
References
1- www.postgresql.org/support/security/CVE-2026-16238/nvdVendor Advisory
News mentions
1- PostgreSQL: 25 Vulnerabilities Disclosed, Many Allowing Code ExecutionVypr Intelligence · Aug 13, 2026