CVE-2026-6476
Title: SQL injection in pg_createsubscriber
SQLi
Proof Of Concept
No public PoC currently indexed for CVE-2026-6476.
CWE Category
CWE-89
Published Date
May 14, 2026
Modified Date
May 18, 2026
Exploit Status
Not Found
Score
7.2
CVSS v3.1
Exploit Probability (EPSS)
0.29%
Vulnerability Summary
CVE-2026-6476: SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17 and 18, minor versions before PostgreSQL 18.4 and 17.10 are affected. Versions before PostgreSQL 17 are unaffected.
Impacted Vendors
Reference Links
CVSS v3.1
Source Entity
f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
Severity
HIGH
7.2
Attack Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
NONE
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
UNCHANGED
RAW VECTOR
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2026-6476 Exploits & PoCs (Proof Of Concept)
No public PoCs found in our database for this CVE.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data updated via NVD.
MODIFIED
Vulnerability data updated via NVD.
Attack Vector Matrix
Access Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
NONE
CVSS Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Stack
No specific products linked.