CVE-2026-6471high
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL has released updates to address a critical security vulnerability, identified as CVE-2026-6471, which has reportedly been present in the database system for 12 years. The flaw allows a user who possesses replication privileges to execute arbitrary code on the database server. This is achieved by loading a specially crafted malicious library, leveraging a mechanism within the logical…