Critical Security Vulnerability in postgresql18: Red Hat Security Advisory RHSA-2026:19009
Summary
RHSA-2026:19009: Red Hat Security Advisory: postgresql18 security update. Affects postgresql18 versions < 0:18.3-1.el10_2. Fixed in 0:18.3-1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PostgreSQL is a powerful, open-source object-relational database system that uses and extends the SQL language. It is known for its reliability, feature robustness, and performance. The postgresql18 package is a specific version of PostgreSQL tailored for Red Hat Enterprise Linux 10.2. This version includes various features and enhancements but has recently been found to contain critical security vulnerabilities that could potentially compromise the integrity and confidentiality of the database system.
Vulnerability Detail
The vulnerabilities identified in postgresql18, tracked under CVE-2026-2003 to CVE-2026-2007, stem from improper handling of certain inputs, leading to potential unauthorized access and data manipulation. These vulnerabilities could allow an attacker to execute arbitrary code, escalate privileges, or cause denial of service, significantly impacting the database's security and availability. The CVSS score of this vulnerability is 8.8, indicating a high severity level that necessitates immediate attention.
How To Fix
Minimum fixed version
0:18.3-1.el10_2
This is the first release that contains the fix.
sudo dnf update postgresql18Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider restricting access to the database by implementing firewall rules or using network segmentation to limit exposure. Additionally, review and tighten database permissions to minimize the risk of exploitation.
Conclusion
The postgresql18 package has critical vulnerabilities that require immediate attention. Updating to the patched version is essential to maintain the security and integrity of your database. Implementing workarounds can provide temporary relief, but a permanent fix through updates is strongly recommended.
See every vulnerability recorded for postgresql18 →
FAQ
The vulnerabilities involve improper input handling, which could lead to unauthorized access and data manipulation.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without any signup.
The CVSS score of this vulnerability is 8.8, indicating a high severity level.
Implement firewall rules and review database permissions to limit exposure until you can apply the update.
More details can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:19009.json.
Related vulnerabilities
Recent vulnerabilities recorded for postgresql18.
