Veille CVE

Mercredi 30 septembre 2026

3 CVE sur 7

  1. CVE-2026-92873 6.9 Moyenne

    Pgpool Global Development Group Pgpool-II

    Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.

  2. CVE-2026-92872 5.3 Moyenne

    Pgpool Global Development Group Pgpool-II

    Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information.

  3. CVE-2026-92868 6.9 Moyenne

    Pgpool Global Development Group Pgpool-II

    An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication.