High severity7.2NVD Advisory· Published May 14, 2026· Updated Jun 17, 2026
CVE-2026-6476
CVE-2026-6476
Description
SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
48cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*range: >=17.0,<17.10
- (no CPE)range: <17.10, <18.4
- osv-coords46 versionspkg:bitnami/postgresqlpkg:rpm/almalinux/pg_repackpkg:rpm/almalinux/pgauditpkg:rpm/almalinux/pgvectorpkg:rpm/almalinux/postgispkg:rpm/almalinux/postgis-clientpkg:rpm/almalinux/postgis-docspkg:rpm/almalinux/postgis-upgradepkg:rpm/almalinux/postgis-utilspkg:rpm/almalinux/postgres-decoderbufspkg:rpm/almalinux/postgresqlpkg:rpm/almalinux/postgresql-contribpkg:rpm/almalinux/postgresql-docspkg:rpm/almalinux/postgresql-plperlpkg:rpm/almalinux/postgresql-plpython3pkg:rpm/almalinux/postgresql-pltclpkg:rpm/almalinux/postgresql-private-develpkg:rpm/almalinux/postgresql-private-libspkg:rpm/almalinux/postgresql-serverpkg:rpm/almalinux/postgresql-server-develpkg:rpm/almalinux/postgresql-staticpkg:rpm/almalinux/postgresql-testpkg:rpm/almalinux/postgresql-test-rpm-macrospkg:rpm/almalinux/postgresql-upgradepkg:rpm/almalinux/postgresql-upgrade-develpkg:rpm/almalinux/postgresql18pkg:rpm/almalinux/postgresql18-contribpkg:rpm/almalinux/postgresql18-docspkg:rpm/almalinux/postgresql18-plperlpkg:rpm/almalinux/postgresql18-plpython3pkg:rpm/almalinux/postgresql18-private-develpkg:rpm/almalinux/postgresql18-private-libspkg:rpm/almalinux/postgresql18-serverpkg:rpm/almalinux/postgresql18-server-develpkg:rpm/almalinux/postgresql18-staticpkg:rpm/almalinux/postgresql18-testpkg:rpm/almalinux/postgresql18-test-rpm-macrospkg:rpm/almalinux/postgresql18-upgradepkg:rpm/almalinux/postgresql18-upgrade-develpkg:rpm/opensuse/postgresql17&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/postgresql17&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/postgresql18&distro=openSUSE%20Tumbleweedpkg:rpm/suse/postgresql17&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/postgresql17&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/postgresql18&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/postgresql18&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0
>= 17.0.0, < 17.10.0+ 45 more
- (no CPE)range: >= 17.0.0, < 17.10.0
- (no CPE)range: < 1.5.3-1.module_el9.8.0+234+5456f35d
- (no CPE)range: < 18.0-1.module_el9.8.0+234+5456f35d
- (no CPE)range: < 0.8.1-1.module_el9.8.0+234+5456f35d
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: < 3.6.1-4.module_el9.8.0+310+22372bcc
- (no CPE)range: < 3.3.1-1.Final.module_el9.8.0+234+5456f35d
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.module_el9.8.0+310+22372bcc
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 18.6-1.el10_2
- (no CPE)range: < 17.10-160000.1.1
- (no CPE)range: < 17.10-1.1
- (no CPE)range: < 18.4-1.1
- (no CPE)range: < 17.10-160000.1.1
- (no CPE)range: < 17.10-160000.1.1
- (no CPE)range: < 18.4-160000.1.1
- (no CPE)range: < 18.4-160000.1.1
Patches
Vulnerability mechanics
References
1- www.postgresql.org/support/security/CVE-2026-6476/nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.