pgbouncer
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 2, 2012 to present
11
Total CVEs
8
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
38/100
low
Severity Distribution
Critical
2High
6Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
Null Pointer Dereference
2
2
Buffer Overflow
1
3
Integer Overflow
1
4
SQL Injection
1
5
XSS
1
Most Affected Products
1. PgBouncer PgBouncer17
2. Nodejs Node.js5
3. Microsoft azl3 pgbouncer 1.25.1-14
4. redhat Enterprise Linux4
5. redhat Enterprise Linux Eus4
Recent Vulnerabilities
See more →CVE-2026-6667
CVSS 4.3EPSS 0%medium
PgBouncer missing authorization check in KILL_CLIENT admin command
5/9/2026
CVE-2026-6666
CVSS 7.5EPSS 0%high
PgBouncer crash in kill_pool_logins_server_error
5/9/2026
CVE-2026-6665
CVSS 9.8EPSS 0%critical
PgBouncer buffer overflow in SCRAM
5/9/2026
CVE-2026-6664
CVSS 7.5EPSS 0%high
PgBouncer integer overflow in PgBouncer network packet parsing
5/9/2026
CVE-2025-12819
CVSS 8.1high
Untrusted search path in auth_query connection in PgBouncer
12/3/2025
CVE-2025-2291
CVSS 9.8critical
PgBouncer default auth_query does not take Postgres password expiry into account
4/16/2025
CVE-2021-3935
CVSS 8.1high
11/8/2021
CVE-2021-3672
CVSS 6.8medium
7/30/2021
CVE-2015-6817
CVSS 8.1high
5/23/2017
CVE-2015-4054
CVSS 7.5high
5/23/2017
Monitor pgbouncer in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.