CVE search

403.038 vulnerabilities · 1.766 actively exploited (CISA KEV)

16 results

ID	Severity	Summary	Published
CVE-2026-50738	MÉDIO5.3	A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle events. The condition is reachable during normal replication operation, including by a low-privileged user able to infl	28/07/2026
CVE-2026-50737	ALTO7.5	When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber. Because the apply worker runs at a privilege level equivalent to a PostgreSQL superuser in default installations, any function invoked by such a default express	28/07/2026
CVE-2026-50736	ALTO7.5	The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the privilege level of the apply worker, which is equivalent to a PostgreSQL superuser in default installations. A party acting as the publisher can