https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:19:27.782933+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-06728 bdu:2026-06728 2026-10-07T01:19:27.789829+00:00 bdu:2026-06728 https://cve.radiocsirt.org/vuln/bit-pgbouncer-2026-6665 BIT-pgbouncer-2026-6665 — PgBouncer buffer overflow in SCRAM 2026-10-07T01:19:27.789862+00:00

Affected: Bitnami: pgbouncer

The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0559 certfr-2026-avi-0559 — De multiples vulnérabilités ont été découvertes dans PostgreSQL PgBouncer. Elles permettent à un attaquant de provoquer… 2026-10-07T01:19:27.789894+00:00 certfr-2026-avi-0559 https://cve.radiocsirt.org/vuln/cleanstart-2026-dl78780 Withdrawn: CLEANSTART-2026-DL78780 — Security fixes for CVE-2026-6664, CVE-2026-6665, CVE-2026-6666, CVE-2026-6667 applied in versions: 1.16.1-r0, 1.25.1-r0 2026-10-07T01:19:27.789911+00:00

Withdrawn by the publisher.

Affected: CleanStart: pgbouncer

Multiple security vulnerabilities affect the pgbouncer package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-316852 EUVD-2026-316852 2026-10-07T01:19:27.789930+00:00 EUVD-2026-316852 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6665 fkie_cve-2026-6665 2026-10-07T01:19:27.789942+00:00

The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.

 https://cve.radiocsirt.org/vuln/ghsa-mhmx-mjv6-w337 GHSA-mhmx-mjv6-w337 2026-10-07T01:19:27.789961+00:00

The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6665 msrc_CVE-2026-6665 — PgBouncer buffer overflow in SCRAM 2026-10-07T01:19:27.789975+00:00 msrc_CVE-2026-6665 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6665 UBUNTU-CVE-2026-6665 2026-10-07T01:19:27.789989+00:00

Affected: Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer, Ubuntu:24.04:LTS: pgbouncer, Ubuntu:25.10: pgbouncer, Ubuntu:26.04:LTS: pgbouncer

The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1445 WID-SEC-W-2026-1445 — PgBouncer: Mehrere Schwachstellen 2026-10-07T01:19:27.790014+00:00

Ein Angreifer kann mehrere Schwachstellen in PgBouncer ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Angriffe durchzuführen.