DEBIAN-CVE-2026-120147: High severity debian/postgresql-15 vulnerability
Published Nov 12, 2026
·Updated
Affected Software
3 affected components
debian/postgresql-15*
debian/postgresql-17*
debian/postgresql-18*
Event History
Nov 12, 2026
CVE Published
via OSV·03:17 PM
Data Sourced
via OSV·03:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Debian PostgreSQL packages should be included in triage?
Inventory systems using debian/postgresql-15, debian/postgresql-17, or debian/postgresql-18.
2
What access does an attacker need according to the severity vector?
The vector indicates network-based exploitation with low attack complexity and no user interaction, but requires low privileges. It does not describe an unauthenticated attack.
3
What is the potential impact if exploitation succeeds?
The reported score is 8.8 (high). The vector rates confidentiality, integrity, and availability impact as high, with scope unchanged.