CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120065
HIGHCVSS 7.1NVD feed
Published 2 November 2026 · tracked since 3 November 2026
Description
For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to identify rows. It places the column's name, as reported by the server, between double quotes in its keyset queries and in the WHERE clause of its positioned SELECT, UPDATE, and DELE
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog