CVE-2026-51992

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. ClickHouse's PostgreSQL integration intentionally allows users with valid PostgreSQL credentials to execute queries against a remote PostgreSQL server. No vulnerability in ClickHouse is exploited; code execution occurs on the downstream PostgreSQL server using credentials explicitly provided by the user with specific pg_execute_server_program permission, exploiting a feature that was wrongly reported as CVE-2019-9193 in PostgreSQL (https://www.postgresql.org/about/news/cve-2019-9193-not-a-security-vulnerability-1935/).

Published

Jul 29, 2026

Last Modified

Aug 6, 2026

Status

Rejected

• CVE-2026-5197A vulnerability was found in code-projects Student Membershi…6.3
• CVE-2026-51974An eval() injection vulnerability in the get_list function i…8.8
• CVE-2026-51977An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security…9.1
• CVE-2026-5198A vulnerability was determined in code-projects Student Memb…7.3
• CVE-2026-5199A writer role user in an attacker-controlled namespace could…2.3
• CVE-2026-51990An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in…9.8
• CVE-2026-51994mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to …9.1
• CVE-2026-51995An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a…7.5
• CVE-2026-51996An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a…
• CVE-2026-51997An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a…8.8
• CVE-2026-5200The AcyMailing – An Ultimate Newsletter Plugin and Marketing…8.8
• CVE-2026-52001An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a…