CVE-2026-16238
Last modified
CVE-2026-16238 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.6 are affected. EPSS estimates a 0.41% chance of exploitation in the next 30 days.
Description
Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before PostgreSQL 18 are unaffected.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Postgresql | Postgresql | >= 14.0, < 14.24 |
| Postgresql | Postgresql | >= 15.0, < 15.19 |
| Postgresql | Postgresql | >= 16.0, < 16.15 |
| Postgresql | Postgresql | >= 17.0, < 17.11 |
| Postgresql | Postgresql | >= 18.0, < 18.5 |
References
- https://www.postgresql.org/support/security/CVE-2026-16238/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2026-16238?
How severe is CVE-2026-16238?
How do I fix CVE-2026-16238?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-16231hbs is an Express view engine that wraps Handlebars. Its reg…8.1
- CVE-2026-16232An authentication bypass vulnerability in the Check Point Sm…9.8
- CVE-2026-16233There is a memory corruption vulnerability recently discover…7.8
- CVE-2026-16234There is a memory corruption vulnerability recently discover…7.8
- CVE-2026-16235Crypt::Password versions through 0.28 for Perl generate inse…9.8
- CVE-2026-16236The Realtyna Organic IDX plugin for WordPress is vulnerable …8.8
- CVE-2026-16239Type confusion in PostgreSQL "portal"/cursor lifecycle allow…8.8
- CVE-2026-1624A security vulnerability has been detected in D-Link DWR-M96…8.8
- CVE-2026-16241Integer underflow in PostgreSQL ECPG allows a database serve…3.8
- CVE-2026-16242A flaw was found in the Konnectivity proxy-server configurat…9.4
- CVE-2026-16243In Eclipse OMR versions up to 0.11, the arraycmp SIMD implem…7.5
- CVE-2026-16244A security vulnerability has been detected in itsourcecode H…6.3
Are you affected by CVE-2026-16238?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST