Flaws in PgBouncer Allow Remote Code Execution and Denial of Service
ID: e2eb8441-4e99-546e-9a07-e058bf631616
STIX ID: report--e2eb8441-4e99-546e-9a07-e058bf631616
Feed Name: ThreatCluster
Threat Score
Multiple critical vulnerabilities in PgBouncer (CVE-2026-6664, CVE-2026-6665, CVE-2026-6666) affecting Fedora 43–45 were disclosed; the flaws can enable arbitrary code execution or denial-of-service via malformed SCRAM authentication packets. Users are advised to upgrade immediately to PgBouncer 1.26.0 (patches available Sept 26, 2026) and apply updates via dnf to mitigate the risk.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.