Количество 7
Количество 7
BDU:2026-06727
Уязвимость команды KILL_CLIENT программного обеспечения для пула соединения в PostgreSQL PgBouncer, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260714-73-0048
Уязвимость pgbouncer
CVE-2026-6667
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.
CVE-2026-6667
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.
CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin command
CVE-2026-6667
PgBouncer before 1.25.2 did not perform an appropriate authorization c ...
GHSA-gc77-jrv9-6fjp
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-06727 Уязвимость команды KILL_CLIENT программного обеспечения для пула соединения в PostgreSQL PgBouncer, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
 | ROS-20260714-73-0048 Уязвимость pgbouncer | CVSS3: 4.3 | 0% Низкий | 18 дней назад |
 | CVE-2026-6667 PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter. | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-6667 PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter. | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-6667 PgBouncer missing authorization check in KILL_CLIENT admin command | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
| CVE-2026-6667 PgBouncer before 1.25.2 did not perform an appropriate authorization c ... | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
| GHSA-gc77-jrv9-6fjp PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter. | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу