LIVE · cybersecurity feed
Live wire

database security news

1 stories
CVE-2026-6471high

PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution

PostgreSQL has released updates to address a critical security vulnerability, identified as CVE-2026-6471, which has reportedly been present in the database system for 12 years. The flaw allows a user who possesses replication privileges to execute arbitrary code on the database server. This is achieved by loading a specially crafted malicious library, leveraging a mechanism within the logical…