CVE-2026-105512

Last verified 2h ago

PostgreSQL libpq quoting bypass in psql

Exploited in the wild?

No evidence

Public exploit?

GitHub, Exploit-DB, Metasploit

YES · 1 PoCs

Patch available?

Upstream & major distros

YES · Upstream & distros

Severity

CVSS v3.1

8.1 HIGH

Risk signals

Known exploited

Not in KEV

EPSS probability

84.2th percentile

PoC repos

CVSS

8.1

Invalid multibyte sequences defeat PQescapeLiteral, enabling SQL injection.

Per-distro commands are being verified

Our team is confirming fixed package versions for PostgreSQL. Use your distribution's security tracker in the meantime.

Still the most-scanned bug on the internet. Embedded Log4j in vendor appliances keeps it alive.

Encoded dot segments escape DocumentRoot; with mod_cgi enabled, leads to RCE.

Specific nginx fastcgi_split_path_info configs allow RCE in PHP-FPM.