CVE-2026-120065

For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to identify rows. It places the column's name, as reported by the server, between double quotes in its keyset queries and in the WHERE clause of its positioned SELECT, UPDATE, and DELETE statements, without doubling any double quote in the name. A column name that contains a double quote therefore changes the SQL that the driver runs with the application's privileges, including which rows a positioned UPDATE or DELETE affects. Any database user who can create a table that the application reads with an updatable cursor can choose such a name, and so can a server not trusted under current SSL settings. Versions before psqlODBC 18.00.0006 are affected.

• CWE-89

• https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-9cg8-r57h-h6jj

Published

Nov 2, 2026

Last Modified

Nov 2, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-120059For an updatable cursor over a table without OIDs that has a…6.8
• CVE-2026-120060psqlODBC trusts counts and lengths in server data in three p…5.9
• CVE-2026-120061The psqlODBC parser for ODBC escape sequences in application…7.5
• CVE-2026-120062SQLSpecialColumns in psqlODBC splices the table and schema n…7.5
• CVE-2026-120063When psqlODBC quotes a schema or table name into a 128-byte …5.9
• CVE-2026-120064Several psqlODBC entry points use an application-supplied co…7.5
• CVE-2026-120066On Unix-like systems, when logging is enabled, psqlODBC crea…5.3
• CVE-2026-120067For updatable cursors, which are enabled by default, psqlODB…5.9
• CVE-2026-12007Use after free in Core in Google Chrome on Windows prior to …8.8
• CVE-2026-120070The User Frontend – Membership, User Registration, User Prof…8.8
• CVE-2026-120075The WP Activity Log plugin for WordPress is vulnerable to St…7.2
• CVE-2026-12008Use after free in DigitalCredentials in Google Chrome prior …8.3