PgBouncer
3 known vulnerabilities in PgBouncer, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-6669 CVSS 5.9 medium Missing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through…
- CVE-2026-6668 CVSS 7.5 high Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial…
- CVE-2026-19888 CVSS 7.5 high Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated…