CVE-2026-110181

PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bodies. PostgreSQL analyses such functions at declaration time, while Anonymizer only attempts to check them at execution time. This problem can be exploited by any user with the TEMPORARY privilege. The issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.

• CWE-693

• https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/718

Published

Oct 28, 2026

Last Modified

Oct 29, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-110171Use after free in Media in Google Chrome prior to 155.0.8059…8.8
• CVE-2026-110172Use after free in Media in Google Chrome prior to 155.0.8059…8.8
• CVE-2026-110176The File Force Download module for Drupal 7 implements hook_…8.7
• CVE-2026-110179The affiliate-toolkit WordPress plugin before 3.8.9 does no…6.8
• CVE-2026-11018Insufficient policy enforcement in Actor in Google Chrome pr…6.5
• CVE-2026-110180fast-uri is a dependency-free RFC 3986 URI parser and serial…4.8
• CVE-2026-110182PostgreSQL Anonymizer contains a vulnerability related to th…4.3
• CVE-2026-110183PostgreSQL Anonymizer contains a vulnerability related to st…4.3
• CVE-2026-110184The Newsmatic theme for WordPress is vulnerable to blind SQL…7.5
• CVE-2026-110185The Bit Flows: AI Agent Automation & Integrations for Forms,…5.9
• CVE-2026-110186IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote a…9.8
• CVE-2026-11019Inappropriate implementation in Payments in Google Chrome on…6.5