CVE catalog

CVE-2026-18408

Untrusted data inclusion in pg_dump in PostgreSQL…

[CVE catalog]

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \restrict meta-command input expansion. The fix for CVE-2025-8714 introduced \restrict and \unrestrict to block this attack, but \unrestrict itself was sufficient for an attack. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. Non-core use of \restrict would be affected, but we've not identified non-core use. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Severity
High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.36% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debianbookworm-securitypostgresql-1515.19-0+deb12u1Fixed[CVE-2026-18408]
Debianbookwormpostgresql-1515.19-0+deb12u1FixedDistribution-reported fixed boundary[CVE-2026-18408]

Showing 2 fix observations. All 188 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Alpine3.21postgresql1616.15-r0UnknownSource applicability is not established[ALPINE-CVE-2026-18408]
Alpine3.21postgresql1717.11-r0UnknownSource applicability is not established[ALPINE-CVE-2026-18408]
Alpine3.22postgresql1616.15-r0UnknownSource applicability is not established[ALPINE-CVE-2026-18408]
Alpine3.22postgresql1717.11-r0UnknownSource applicability is not established[ALPINE-CVE-2026-18408]
Alpine3.23postgresql1717.11-r0UnknownSource applicability is not established[ALPINE-CVE-2026-18408]
Alpine3.23postgresql1818.5-r0UnknownSource applicability is not established[ALPINE-CVE-2026-18408]
Alpine3.24postgresql1717.11-r0UnknownSource applicability is not established[ALPINE-CVE-2026-18408]
Alpine3.24postgresql1818.5-r0UnknownSource applicability is not established[ALPINE-CVE-2026-18408]
Debianbookwormpostgresql-1515.18-0+deb12u1Affected[CVE-2026-18408]
Debianbookwormpostgresql-1515.19-0+deb12u1FixedDistribution-reported fixed boundary[CVE-2026-18408]
Debianbookworm-securitypostgresql-1515.19-0+deb12u1Fixed[CVE-2026-18408]
Ubuntu20.04postgresql-1212.0-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.1-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.1-2build1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.10-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.11-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.12-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.13-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.14-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.15-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.16-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.17-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.18-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.19-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.2-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.2-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.2-4UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.20-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.22-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.22-0ubuntu0.20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.22-0ubuntu0.20.04.4UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.4-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.5-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.6-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.7-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.8-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu20.04postgresql-1212.9-0ubuntu0.20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.1-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.10-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.11-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.12-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.13-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.15-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.17-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.18-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.19-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.2-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.2-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.20-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.22-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.23-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.24-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.3-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.4-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.5-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.6-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.7-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.8-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu22.04postgresql-1414.9-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.0-2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.1-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.1-1build1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.1-1build3UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.10-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.11-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.13-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.14-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.15-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.2-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.2-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.2-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.2-1ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.3-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.4-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.4-0ubuntu0.24.04.2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.6-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.8-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu24.04postgresql-1616.9-0ubuntu0.24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu26.04postgresql-1818.0-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu26.04postgresql-1818.1-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu26.04postgresql-1818.1-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu26.04postgresql-1818.1-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu26.04postgresql-1818.1-2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu26.04postgresql-1818.3-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu26.04postgresql-1818.4-0ubuntu0.26.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntu26.04postgresql-1818.6-0ubuntu0.26.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntunoblelibecpg-compat316.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibecpg-dev16.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibecpg616.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibpgtypes316.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibpq-dev16.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblelibpq516.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblepostgresql-1616.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblepostgresql-client-1616.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblepostgresql-doc-1616.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblepostgresql-plperl-1616.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblepostgresql-plpython3-1616.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblepostgresql-pltcl-1616.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntunoblepostgresql-server-dev-1616.15-0ubuntu0.24.04.1UnknownSource applicability is not establishedProvider not reported
Ubuntupropostgresql-1010.1-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.1-2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.10-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.12-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.14-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.15-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.16-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.17-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.18-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.19-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.2-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.20-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.21-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.22-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.23-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.23-0ubuntu0.18.04.2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.23-0ubuntu0.18.04.2+esm1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.23-0ubuntu0.18.04.2+esm2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.23-0ubuntu0.18.04.2+esm3UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.3-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.4-0ubuntu0.18.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.5-0ubuntu0.18.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.6-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.7-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.8-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-1010.9-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.1-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.10-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.11-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.12-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.13-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.14-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.15-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.16-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.17-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.18-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.19-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.2-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.2-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.2-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.20-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.21-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.22-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.23-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.24-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.24-0ubuntu0.14.04+esm1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.3-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.3-1bzr1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.3-1bzr2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.4-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.5-0ubuntu0.14.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.6-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.7-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.8-0ubuntu0.4.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.39.3.9-0ubuntu0.14.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.0-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.0-2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.0-3UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.1-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.10-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.11-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.12-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.13-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.14-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.16-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.17-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.18-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.19-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.2-1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.21-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.23-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.24-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1+esm1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1+esm10UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1+esm2UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1+esm3UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1+esm4UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1+esm5UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1+esm6UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1+esm7UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.25-0ubuntu0.16.04.1+esm8UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.3-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.4-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.5-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.6-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.7-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.8-0ubuntu0.16.04.1UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Ubuntupropostgresql-9.59.5.9-0ubuntu0.16.04UnknownSource applicability is not established[UBUNTU-CVE-2026-18408]
Original provider fields
{
  "package_releases": [
    {
      "name": "postgresql-15",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "15.18-0+deb12u1"
    },
    {
      "name": "postgresql-15",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "15.19-0+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "postgresql-15",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "15.19-0+deb12u1"
    }
  ],
  "distribution_packages": [
    {
      "name": "postgresql",
      "ranges": [
        {
          "fixed": "18.5",
          "introduced": "18.0",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18408",
      "fixed_version": "18.5",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-18408",
      "provider_updated_at": "2026-08-29T23:17:20.843"
    },
    {
      "name": "postgresql-16",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "libecpg-compat3",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "libecpg-dev",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "libecpg6",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "libpgtypes3",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "libpq-dev",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "libpq5",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-client-16",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-doc-16",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-plperl-16",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-plpython3-16",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-pltcl-16",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-server-dev-16",
      "distro": "ubuntu",
      "ranges": [
        {
          "fixed": "16.15-0ubuntu0.24.04.1",
          "introduced": "0"
        }
      ],
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "postgresql16",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "16.15-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-18408",
      "fixed_version": "16.15-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-18408",
      "provider_updated_at": "2026-10-01T02:17:49.195794525Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql16",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "16.15-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-18408",
      "fixed_version": "16.15-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-18408",
      "provider_updated_at": "2026-10-01T02:17:49.195794525Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql17",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.11-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-18408",
      "fixed_version": "17.11-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-18408",
      "provider_updated_at": "2026-10-01T02:17:49.195794525Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql17",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.11-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-18408",
      "fixed_version": "17.11-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-18408",
      "provider_updated_at": "2026-10-01T02:17:49.195794525Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql17",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.11-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-18408",
      "fixed_version": "17.11-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-18408",
      "provider_updated_at": "2026-10-01T02:17:49.195794525Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql17",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.11-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-18408",
      "fixed_version": "17.11-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-18408",
      "provider_updated_at": "2026-10-01T02:17:49.195794525Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql18",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "18.5-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-18408",
      "fixed_version": "18.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-18408",
      "provider_updated_at": "2026-10-01T02:17:49.195794525Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql18",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "18.5-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2026-18408",
      "fixed_version": "18.5-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2026-18408",
      "provider_updated_at": "2026-10-01T02:17:49.195794525Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-9.3",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "9.3.1-1",
        "9.3.2-1",
        "9.3.2-1ubuntu1",
        "9.3.2-1ubuntu2",
        "9.3.3-1",
        "9.3.3-1bzr1",
        "9.3.3-1bzr2",
        "9.3.4-1",
        "9.3.5-0ubuntu0.14.04.1",
        "9.3.6-0ubuntu0.14.04",
        "9.3.7-0ubuntu0.14.04",
        "9.3.8-0ubuntu0.4.04",
        "9.3.9-0ubuntu0.14.04",
        "9.3.10-0ubuntu0.14.04",
        "9.3.11-0ubuntu0.14.04",
        "9.3.12-0ubuntu0.14.04",
        "9.3.13-0ubuntu0.14.04",
        "9.3.14-0ubuntu0.14.04",
        "9.3.15-0ubuntu0.14.04",
        "9.3.16-0ubuntu0.14.04",
        "9.3.17-0ubuntu0.14.04",
        "9.3.18-0ubuntu0.14.04.1",
        "9.3.19-0ubuntu0.14.04",
        "9.3.20-0ubuntu0.14.04",
        "9.3.21-0ubuntu0.14.04",
        "9.3.22-0ubuntu0.14.04",
        "9.3.23-0ubuntu0.14.04",
        "9.3.24-0ubuntu0.14.04",
        "9.3.24-0ubuntu0.14.04+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-18408",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-18408",
      "provider_updated_at": "2026-09-02T19:35:30.464619297Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-9.5",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "9.5.0-1",
        "9.5.0-2",
        "9.5.0-3",
        "9.5.1-1",
        "9.5.2-1",
        "9.5.3-0ubuntu0.16.04",
        "9.5.4-0ubuntu0.16.04",
        "9.5.5-0ubuntu0.16.04",
        "9.5.6-0ubuntu0.16.04",
        "9.5.7-0ubuntu0.16.04",
        "9.5.8-0ubuntu0.16.04.1",
        "9.5.9-0ubuntu0.16.04",
        "9.5.10-0ubuntu0.16.04",
        "9.5.11-0ubuntu0.16.04",
        "9.5.12-0ubuntu0.16.04",
        "9.5.13-0ubuntu0.16.04",
        "9.5.14-0ubuntu0.16.04",
        "9.5.16-0ubuntu0.16.04.1",
        "9.5.17-0ubuntu0.16.04.1",
        "9.5.18-0ubuntu0.16.04.1",
        "9.5.19-0ubuntu0.16.04.1",
        "9.5.21-0ubuntu0.16.04.1",
        "9.5.23-0ubuntu0.16.04.1",
        "9.5.24-0ubuntu0.16.04.1",
        "9.5.25-0ubuntu0.16.04.1",
        "9.5.25-0ubuntu0.16.04.1+esm1",
        "9.5.25-0ubuntu0.16.04.1+esm2",
        "9.5.25-0ubuntu0.16.04.1+esm3",
        "9.5.25-0ubuntu0.16.04.1+esm4",
        "9.5.25-0ubuntu0.16.04.1+esm5",
        "9.5.25-0ubuntu0.16.04.1+esm6",
        "9.5.25-0ubuntu0.16.04.1+esm7",
        "9.5.25-0ubuntu0.16.04.1+esm8",
        "9.5.25-0ubuntu0.16.04.1+esm10"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-18408",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-18408",
      "provider_updated_at": "2026-09-02T19:35:30.464619297Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-10",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "10.1-1",
        "10.1-2",
        "10.2-1",
        "10.3-1",
        "10.4-0ubuntu0.18.04",
        "10.5-0ubuntu0.18.04",
        "10.6-0ubuntu0.18.04.1",
        "10.7-0ubuntu0.18.04.1",
        "10.8-0ubuntu0.18.04.1",
        "10.9-0ubuntu0.18.04.1",
        "10.10-0ubuntu0.18.04.1",
        "10.12-0ubuntu0.18.04.1",
        "10.14-0ubuntu0.18.04.1",
        "10.15-0ubuntu0.18.04.1",
        "10.16-0ubuntu0.18.04.1",
        "10.17-0ubuntu0.18.04.1",
        "10.18-0ubuntu0.18.04.1",
        "10.19-0ubuntu0.18.04.1",
        "10.20-0ubuntu0.18.04.1",
        "10.21-0ubuntu0.18.04.1",
        "10.22-0ubuntu0.18.04.1",
        "10.23-0ubuntu0.18.04.1",
        "10.23-0ubuntu0.18.04.2",
        "10.23-0ubuntu0.18.04.2+esm1",
        "10.23-0ubuntu0.18.04.2+esm2",
        "10.23-0ubuntu0.18.04.2+esm3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-18408",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-18408",
      "provider_updated_at": "2026-09-02T19:35:30.464619297Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-12",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "12.0-1",
        "12.1-1",
        "12.1-2build1",
        "12.2-1",
        "12.2-1ubuntu2",
        "12.2-4",
        "12.4-0ubuntu0.20.04.1",
        "12.5-0ubuntu0.20.04.1",
        "12.6-0ubuntu0.20.04.1",
        "12.7-0ubuntu0.20.04.1",
        "12.8-0ubuntu0.20.04.1",
        "12.9-0ubuntu0.20.04.1",
        "12.10-0ubuntu0.20.04.1",
        "12.11-0ubuntu0.20.04.1",
        "12.12-0ubuntu0.20.04.1",
        "12.13-0ubuntu0.20.04.1",
        "12.14-0ubuntu0.20.04.1",
        "12.15-0ubuntu0.20.04.1",
        "12.16-0ubuntu0.20.04.1",
        "12.17-0ubuntu0.20.04.1",
        "12.18-0ubuntu0.20.04.1",
        "12.19-0ubuntu0.20.04.1",
        "12.20-0ubuntu0.20.04.1",
        "12.22-0ubuntu0.20.04.1",
        "12.22-0ubuntu0.20.04.2",
        "12.22-0ubuntu0.20.04.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-18408",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-18408",
      "provider_updated_at": "2026-09-02T19:35:30.464619297Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-14",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "14.24-0ubuntu0.22.04.1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "14.1-1ubuntu1",
        "14.2-1",
        "14.2-1ubuntu1",
        "14.3-0ubuntu0.22.04.1",
        "14.4-0ubuntu0.22.04.1",
        "14.5-0ubuntu0.22.04.1",
        "14.6-0ubuntu0.22.04.1",
        "14.7-0ubuntu0.22.04.1",
        "14.8-0ubuntu0.22.04.1",
        "14.9-0ubuntu0.22.04.1",
        "14.10-0ubuntu0.22.04.1",
        "14.11-0ubuntu0.22.04.1",
        "14.12-0ubuntu0.22.04.1",
        "14.13-0ubuntu0.22.04.1",
        "14.15-0ubuntu0.22.04.1",
        "14.17-0ubuntu0.22.04.1",
        "14.18-0ubuntu0.22.04.1",
        "14.19-0ubuntu0.22.04.1",
        "14.20-0ubuntu0.22.04.1",
        "14.22-0ubuntu0.22.04.1",
        "14.23-0ubuntu0.22.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-18408",
      "fixed_version": "14.24-0ubuntu0.22.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-18408",
      "provider_updated_at": "2026-09-02T19:35:30.464619297Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-16",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "16.15-0ubuntu0.24.04.1"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "16.0-2",
        "16.1-1",
        "16.1-1build1",
        "16.1-1build3",
        "16.2-1",
        "16.2-1ubuntu2",
        "16.2-1ubuntu3",
        "16.2-1ubuntu4",
        "16.3-0ubuntu0.24.04.1",
        "16.4-0ubuntu0.24.04.1",
        "16.4-0ubuntu0.24.04.2",
        "16.6-0ubuntu0.24.04.1",
        "16.8-0ubuntu0.24.04.1",
        "16.9-0ubuntu0.24.04.1",
        "16.10-0ubuntu0.24.04.1",
        "16.11-0ubuntu0.24.04.1",
        "16.13-0ubuntu0.24.04.1",
        "16.14-0ubuntu0.24.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-18408",
      "fixed_version": "16.15-0ubuntu0.24.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-18408",
      "provider_updated_at": "2026-09-02T19:35:30.464619297Z",
      "applicability_unknown": true
    },
    {
      "name": "postgresql-18",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "18.6-0ubuntu0.26.04.1"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "18.0-1",
        "18.1-1",
        "18.1-1ubuntu1",
        "18.1-1ubuntu2",
        "18.1-2",
        "18.3-1",
        "18.4-0ubuntu0.26.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2026-18408",
      "fixed_version": "18.6-0ubuntu0.26.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2026-18408",
      "provider_updated_at": "2026-09-02T19:35:30.464619297Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libecpg6]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [libecpg-compat3]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [libecpg-dev]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [libpgtypes3]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [libpq5]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [libpq-dev]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [postgresql-15]Unknown
    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [postgresql-client-15]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [postgresql-doc-15]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · all · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · all · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · all · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · all · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [postgresql-plperl-15]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [postgresql-plpython3-15]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [postgresql-pltcl-15]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

  • [postgresql-server-dev-15]Unknown

    Source package: [postgresql-15]

    Details (4)

    • 15.18-0+deb12u1 · amd64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.18-0+deb12u1 · arm64 · bookworm

      Affected · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

    • 15.19-0+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 15.19-0+deb12u1

      nvd · postgresql-15 · debian · bookworm; nvd · postgresql-15 · debian · 12

[Debian 13 (Trixie)]

  • [libecpg6]Unknown

    Source package: [postgresql-17]

    Details (5)

    • 17.10-0+deb13u1 · amd64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · arm64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · amd64 · trixie-security · Historical version

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

  • [libecpg-compat3]Unknown

    Source package: [postgresql-17]

    Details (5)

    • 17.10-0+deb13u1 · amd64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · arm64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · amd64 · trixie-security · Historical version

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

  • [libecpg-dev]Unknown

    Source package: [postgresql-17]

    Details (5)

    • 17.10-0+deb13u1 · amd64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · arm64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · amd64 · trixie-security · Historical version

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

  • [libpgtypes3]Unknown

    Source package: [postgresql-17]

    Details (5)

    • 17.10-0+deb13u1 · amd64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · arm64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · amd64 · trixie-security · Historical version

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

  • [libpq5]Unknown

    Source package: [postgresql-17]

    Details (5)

    • 17.10-0+deb13u1 · amd64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · arm64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · amd64 · trixie-security · Historical version

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

  • [libpq-dev]Unknown

    Source package: [postgresql-17]

    Details (5)

    • 17.10-0+deb13u1 · amd64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · arm64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · amd64 · trixie-security · Historical version

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

  • [postgresql-17]Unknown
    Details (5)

    • 17.10-0+deb13u1 · amd64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · arm64 · trixie

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.10-0+deb13u1 · amd64 · trixie-security · Historical version

      Affected · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

    • 17.11-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 17.11-0+deb13u1

      nvd · postgresql-17 · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]