https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:49:47.239062+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05973 bdu:2022-05973 2026-10-07T02:49:47.244823+00:00 bdu:2022-05973 https://cve.radiocsirt.org/vuln/bit-pgbouncer-2021-3935 BIT-pgbouncer-2021-3935 2026-10-07T02:49:47.244858+00:00

Affected: Bitnami: pgbouncer

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1.

 https://cve.radiocsirt.org/vuln/cleanstart-2026-dh31041 Withdrawn: CLEANSTART-2026-DH31041 — Security fixes for CVE-2021-3935 applied in versions: 1.16.1-r0 2026-10-07T02:49:47.244890+00:00

Withdrawn by the publisher.

Affected: CleanStart: pgbouncer

Security vulnerability affects the pgbouncer package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-257645 EUVD-2026-257645 2026-10-07T02:49:47.244911+00:00 EUVD-2026-257645 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3935 fkie_cve-2021-3935 2026-10-07T02:49:47.244922+00:00

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1.

 https://cve.radiocsirt.org/vuln/ghsa-jh4v-gqwq-hfrr GHSA-jh4v-gqwq-hfrr 2026-10-07T02:49:47.244943+00:00

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1.

 https://cve.radiocsirt.org/vuln/gsd-2021-3935 gsd-2021-3935 2026-10-07T02:49:47.244957+00:00 gsd-2021-3935 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3935 msrc_CVE-2021-3935 — When PgBouncer is configured to use "cert" authentication a man-in-the-middle attacker can inject arbitrary SQL queries… 2026-10-07T02:49:47.244968+00:00 msrc_CVE-2021-3935 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3935 UBUNTU-CVE-2021-3935 2026-10-07T02:49:47.244983+00:00

Affected: Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer

When PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of TLS certificate verification and encryption. This flaw affects PgBouncer versions prior to 1.16.1.