Pgpool Global Development Group - vulnerabilities (CVEs)
11 CVEs in 2 products, 7 in the last 30 days, newest from 2026-09-30.
Products
- Pgpool-ii - 10 CVEs
- Pgpooladmin - 1 CVEs
Newest CVEs of Pgpool Global Development Group
- CVE-2026-92873 - CVSS 7.3 (high), 2026-09-30: Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog…
- CVE-2026-92872 - CVSS 5.3 (medium), 2026-09-30: Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information.
- CVE-2026-92871 - CVSS 8.7 (high), 2026-09-30: A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.
- CVE-2026-92870 - CVSS 8.7 (high), 2026-09-30: A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination.
- CVE-2026-92869 - CVSS 7.1 (high), 2026-09-30: An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination.
- CVE-2026-92868 - CVSS 6.9 (medium), 2026-09-30: An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication.
- CVE-2026-92867 - CVSS 8.8 (high), 2026-09-30: An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code…
- CVE-2025-46801 - CVSS 9.8 (critical), 2025-05-19: Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited,…
- CVE-2024-45624 - CVSS 7.5 (high), 2024-09-12: Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized…
- CVE-2023-22332 - CVSS 6.5 (medium), 2023-01-30: Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to…
- CVE-2018-16203 - CVSS 9.8 (critical), 2019-01-09: PgpoolAdmin 4.0 and earlier allows remote attackers to bypass the login authentication and obtain the administrative privilege of the PostgreSQL database via…
