CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120144
HIGHCVSS 8.8NVD feed
Published 12 November 2026 · tracked since 13 November 2026
Description
Type confusion from incomplete PostgreSQL type-cache invalidation allows an object creator to execute arbitrary code as the operating system user running the database, via a composite type change while its cache entry is being populated. Within major version 18, minor versions before PostgreSQL 18.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-120151 HIGH 8.8
- CVE-2026-120150 HIGH 8.8
- CVE-2026-120149 HIGH 8.8
- CVE-2026-120147 HIGH 8.8
- CVE-2026-120145 HIGH 8.8
- CVE-2026-120143 HIGH 8.8
- CVE-2026-120142 HIGH 8.8
- CVE-2026-120141 HIGH 8.8
- CVE-2026-120139 HIGH 8.8
- CVE-2026-116336 HIGH 8.8