12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code on Database Servers

A newly disclosed PostgreSQL vulnerability, tracked as CVE-2026-6471 and nicknamed PostGREShell, could allow attackers with low-level replication access to execute arbitrary code on database servers. The flaw in PostgreSQL logical decoding existed for roughly 12 years and has now been fixed in supported releases. PostgreSQL is widely used to store business data, application records, customer […] The post 12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code on Database Servers appeared first on Cyber Security News.