https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:19:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06727 bdu:2026-06727 https://cve.radiocsirt.org/vuln/bdu:2026-06727 https://cve.radiocsirt.org/vuln/bit-pgbouncer-2026-6667 <p><strong>Affected:</strong> Bitnami: pgbouncer</p> <p>PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.</p> <p><strong>Affected:</strong> Bitnami: pgbouncer</p> <p>PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.</p> https://cve.radiocsirt.org/vuln/bit-pgbouncer-2026-6667 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0559 certfr-2026-avi-0559 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0559 https://cve.radiocsirt.org/vuln/cleanstart-2026-dl78780 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: pgbouncer</p> <p>Multiple security vulnerabilities affect the pgbouncer package. These issues are resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: pgbouncer</p> <p>Multiple security vulnerabilities affect the pgbouncer package. These issues are resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-dl78780 https://cve.radiocsirt.org/vuln/euvd-2026-309894 EUVD-2026-309894 https://cve.radiocsirt.org/vuln/euvd-2026-309894 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6667 <p>PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.</p> <p>PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6667 https://cve.radiocsirt.org/vuln/ghsa-gc77-jrv9-6fjp <p>PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.</p> <p>PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-gc77-jrv9-6fjp https://cve.radiocsirt.org/vuln/msrc_cve-2026-6667 msrc_CVE-2026-6667 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6667 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6667 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer, Ubuntu:24.04:LTS: pgbouncer, Ubuntu:25.10: pgbouncer, Ubuntu:26.04:LTS: pgbouncer</p> <p>PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pgbouncer, Ubuntu:18.04:LTS: pgbouncer, Ubuntu:20.04:LTS: pgbouncer, Ubuntu:22.04:LTS: pgbouncer, Ubuntu:24.04:LTS: pgbouncer, Ubuntu:25.10: pgbouncer, Ubuntu:26.04:LTS: pgbouncer</p> <p>PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6667 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1445 <p>Ein Angreifer kann mehrere Schwachstellen in PgBouncer ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in PgBouncer ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1445