CVE-2026-120060

psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied row count in a size subtraction that can underflow. SQLStatistics iterates index keys using a server-supplied key count without bounding it to the fixed storage. Bytea octal decoding reads up to two bytes past the end of a truncated escape sequence. A server not trusted under current SSL settings can crash the client or make it read out of bounds. Versions before psqlODBC 18.00.0006 are affected.

• CWE-125
• CWE-191

• https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-4mfx-cfxx-c877

Published

Nov 2, 2026

Last Modified

Nov 2, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-120040The Mail logging & Catcher plugin for WordPress is vulnerabl…7.5
• CVE-2026-120046Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference…5.3
• CVE-2026-12005IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Ver…7.2
• CVE-2026-120057psqlODBC copies the reply to a large-object read (loread) in…7.5
• CVE-2026-120058psqlODBC sizes its row cache from the column count of a curs…7.5
• CVE-2026-120059For an updatable cursor over a table without OIDs that has a…6.8
• CVE-2026-120061The psqlODBC parser for ODBC escape sequences in application…7.5
• CVE-2026-120062SQLSpecialColumns in psqlODBC splices the table and schema n…7.5
• CVE-2026-120063When psqlODBC quotes a schema or table name into a 128-byte …5.9
• CVE-2026-120064Several psqlODBC entry points use an application-supplied co…7.5
• CVE-2026-120065For an updatable cursor over a table without OIDs that has a…7.1
• CVE-2026-120066On Unix-like systems, when logging is enabled, psqlODBC crea…5.3