CERT-FR: PostgreSQL psqlODBC flaw (CVE-2026-109448) allows remote denial of service before 18.00.0005
CERT-FR advisory CERTFR-2026-AVI-1319, published 15 October 2026, reports a vulnerability in PostgreSQL psqlODBC that lets a remote attacker cause a denial of service. The flaw is tracked as CVE-2026-109448 and affects psqlODBC versions prior to 18.00.0005. The advisory is based on the PostgreSQL project's security release of 14 October 2026. It gives no technical root cause, CVSS score, IOCs or attribution, and does not say whether the flaw is exploited in the wild.
Technical Details
- Affected: psqlODBC versions prior to 18.00.0005.
- Impact: remote denial of service.
- The advisory does not state whether authentication or user interaction is required, and does not describe the vulnerable component.
Remediation
- Upgrade psqlODBC to version 18.00.0005 or later, following the PostgreSQL security announcement for the 18.00.0005 release.
Linha do tempo
-
CERT-FR: PostgreSQL psqlODBC flaw (CVE-2026-109448) allows remote denial of service before 18.00.0005
ler a análise desta fonte ocultar
CERT-FR advisory CERTFR-2026-AVI-1319, published 15 October 2026, reports a vulnerability in PostgreSQL psqlODBC that lets a remote attacker cause a denial of service. The flaw is tracked as CVE-2026-109448 and affects psqlODBC versions prior to 18.00.0005. The advisory is based on the PostgreSQL project's security release of 14 October 2026. It gives no technical root cause, CVSS score, IOCs or attribution, and does not say whether the flaw is exploited in the wild.
Technical Details
- Affected: psqlODBC versions prior to 18.00.0005.
- Impact: remote denial of service.
- The advisory does not state whether authentication or user interaction is required, and does not describe the vulnerable component.
Remediation
- Upgrade psqlODBC to version 18.00.0005 or later, following the PostgreSQL security announcement for the 18.00.0005 release.