~/article/12-year-old-postgresql-vulnerability-enables-database-server-takeover-1rwzut

medium2026-09-04 12:06 UTCSource: SecurityWeek

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

Dubbed PostGREShell, CVE-2026-6471 turns low-level replication access into code execution, permanent superuser privileges and a persistent database backdoor.

Read at the source

Summary written for cymesh.dev. The full article lives at SecurityWeek.

Referenced CVEs

CVE-2026-6471

Topics

cve malware

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/12-year-old-postgresql-vulnerability-enables-database-server-takeover-1rwzut

2026-09-12 15:54 UTC[crit]

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

The Hacker NewsCVE-2026-42016cve cisa iot

2026-09-12 14:14 UTC[high]

Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent

BleepingComputerCVE-2026-85102CVE-2026-85103cve

2026-09-11 16:30 UTC[high]

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

The Hacker NewsCVE-2026-85706cve

2026-09-11 16:29 UTC[high]

Artifactory flaws chained in attacks deploying backdoor malware

BleepingComputermalware

2026-09-11 14:10 UTC[info]

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

The Hacker Newsai malware apt

2026-09-11 14:01 UTC[info]

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

BleepingComputerai malware