https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:56:36.766438+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-07307 bdu:2025-07307 2026-10-03T04:56:36.893635+00:00 bdu:2025-07307 https://cve.radiocsirt.org/vuln/bit-pgbouncer-2025-2291 BIT-pgbouncer-2025-2291 — PgBouncer default auth_query does not take Postgres password expiry into account 2026-10-03T04:56:36.893678+00:00

Affected: Bitnami: pgbouncer

Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0339 certfr-2025-avi-0339 — Une vulnérabilité a été découverte dans PostgreSQL PgBouncer. Elle permet à un attaquant de provoquer un contournement… 2026-10-03T04:56:36.893715+00:00 certfr-2025-avi-0339 https://cve.radiocsirt.org/vuln/euvd-2026-257802 EUVD-2026-257802 2026-10-03T04:56:36.893734+00:00 EUVD-2026-257802 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2291 fkie_cve-2025-2291 2026-10-03T04:56:36.893746+00:00

Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password

 https://cve.radiocsirt.org/vuln/ghsa-qj9w-64mv-p2fw GHSA-qj9w-64mv-p2fw 2026-10-03T04:56:36.893767+00:00

Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-2291 msrc_CVE-2025-2291 — PgBouncer default auth_query does not take Postgres password expiry into account 2026-10-03T04:56:36.893781+00:00 msrc_CVE-2025-2291 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2291 UBUNTU-CVE-2025-2291 2026-10-03T04:56:36.893798+00:00

Affected: Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer, Ubuntu:24.04:LTS: pgbouncer, Ubuntu:25.10: pgbouncer

Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0842 WID-SEC-W-2025-0842 — PgBouncer: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T04:56:36.893825+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PgBouncer ausnutzen, um Sicherheitsvorkehrungen zu umgehen.