Поиск уязвимостей
Количество 10
Количество 10
CVE-2026-6667
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.
CVE-2026-6667
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.
CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin command
CVE-2026-6667
PgBouncer before 1.25.2 did not perform an appropriate authorization c ...
GHSA-gc77-jrv9-6fjp
PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.
BDU:2026-06727
Уязвимость команды KILL_CLIENT программного обеспечения для пула соединения в PostgreSQL PgBouncer, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260714-80-0053
Уязвимость pgbouncer
ROS-20260714-73-0048
Уязвимость pgbouncer
ALT-PU-2026-7648
ALT-PU-2026-7648: package `pgbouncer` update to version 1.25.2-alt1
ALT-PU-2026-7562
ALT-PU-2026-7562: package `pgbouncer` update to version 1.25.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-6667 PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter. | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6667 PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter. | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-6667 PgBouncer missing authorization check in KILL_CLIENT admin command | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| CVE-2026-6667 PgBouncer before 1.25.2 did not perform an appropriate authorization c ... | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| GHSA-gc77-jrv9-6fjp PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter. | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-06727 Уязвимость команды KILL_CLIENT программного обеспечения для пула соединения в PostgreSQL PgBouncer, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
 | ROS-20260714-80-0053 Уязвимость pgbouncer | CVSS3: 4.3 | 0% Низкий | 4 месяца назад |
| ROS-20260714-73-0048 Уязвимость pgbouncer | CVSS3: 4.3 | 0% Низкий | 4 месяца назад |
| ALT-PU-2026-7648 ALT-PU-2026-7648: package `pgbouncer` update to version 1.25.2-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-7562 ALT-PU-2026-7562: package `pgbouncer` update to version 1.25.2-alt1 | CVSS3: 9.8 | 6 месяцев назад |
Уязвимостей на страницу