Medium severity6.5NVD Advisory· Published Sep 30, 2026

CVE-2026-92868

Description

An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication.

Affected products

Pgpool/Pgpool-IIllm-fuzzy

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN22475874/nvd
pgpool.net/news/2026-09-29/nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000