CVE-2026-18893

Published 8 November 2026 · tracked since 9 November 2026

Description

IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to privilege escalation via user-defined function.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-113364
• CVE-2026-113363
• CVE-2026-113362
• CVE-2026-124502 MEDIUM 4.3
• CVE-2026-124500 MEDIUM 6.3
• CVE-2026-124499 MEDIUM 4.7
• CVE-2026-18546 MEDIUM 5.4
• CVE-2026-120113 MEDIUM 6.4
• CVE-2026-116500 MEDIUM 6.2
• CVE-2026-116499 HIGH 8.4

→ Open the live CVE board · all tools