https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:14:44.748522+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-15208 bdu:2025-15208 2026-10-06T10:14:44.754876+00:00 bdu:2025-15208 https://cve.radiocsirt.org/vuln/bit-pgbouncer-2025-12819 BIT-pgbouncer-2025-12819 — Untrusted search path in auth_query connection in PgBouncer 2026-10-06T10:14:44.754918+00:00

Affected: Bitnami: pgbouncer

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1061 certfr-2025-avi-1061 — Une vulnérabilité a été découverte dans PostgreSQL PgBouncer. Elle permet à un attaquant de provoquer une injection SQL… 2026-10-06T10:14:44.754954+00:00 certfr-2025-avi-1061 https://cve.radiocsirt.org/vuln/euvd-2026-264481 EUVD-2026-264481 2026-10-06T10:14:44.754971+00:00 EUVD-2026-264481 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12819 fkie_cve-2025-12819 2026-10-06T10:14:44.754982+00:00

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

 https://cve.radiocsirt.org/vuln/ghsa-qpxx-2fwx-f5qj GHSA-qpxx-2fwx-f5qj 2026-10-06T10:14:44.755002+00:00

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.0 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-12819 msrc_CVE-2025-12819 — Untrusted search path in auth_query connection in PgBouncer 2026-10-06T10:14:44.755016+00:00 msrc_CVE-2025-12819 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-12819 UBUNTU-CVE-2025-12819 2026-10-06T10:14:44.755030+00:00

Affected: Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer, Ubuntu:24.04:LTS: pgbouncer, Ubuntu:25.10: pgbouncer, Ubuntu:26.04:LTS: pgbouncer

Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2734 WID-SEC-W-2025-2734 — PgBouncer: Schwachstelle ermöglicht SQL injection 2026-10-06T10:14:44.755056+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in PgBouncer ausnutzen, um einen SQL-Injection Angriff durchzuführen.