CVE-2026-92871
HighCVSS 7.5Summary
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.
Risk Assessment
Risk of watchdog process failure, leading to loss of monitoring and potential downtime.
Recommendation
Update Pgpool-II to a patched version and monitor watchdog process health.
Other vulnerabilities in Pgpool-II
See all- CVE-2026-92873High
Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.
- CVE-2026-92872Medium
Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information.
- CVE-2026-92870High
A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination.
- CVE-2026-92869Medium
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination.
- CVE-2026-92868Medium
An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication.
- CVE-2026-92867High
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution.
Original NVD description (English source)
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS