Multiple vulnerabilities in PostgreSQL

Advisory ID CVE Number Date discovered Severity Advisory revision
STORM-2026-025 CVE-2026-18408 , CVE-2026-15741 , CVE-2026-14666 08/13/2026 medium v1

Vulnerability details

Several vulnerabilities have been identified in PostgreSQL

Impacted products

ProductsSeverityDetail
Stormshield Management Center medium SMC is impacted

Revisions

Version Date Description
v1 10/20/2026 Initial release


Stormshield Management Center

CVSS v3.1 Overall Score: 5.9      

Analysis

Impacted version

SMC is affected by these PostgreSQL vulnerabilities. They may allow arbitrary code or SQL execution with elevated privileges during database backup/restore operations, as well as a partial bypass of row-level security policies after a role change. Exploitation requires authenticated access and prior access to the database or to the contents of a backup.

<= 3.9.2

Workaround solution

Solution

There is no workaround solution.

The 3.9.3 update will fix this vulnerability.



Attack Vector Attack Complexity Privileges Required User Interaction Scope Confidentiality Impact Integrity Impact Availability impact
Local High None Required Unchanged High High High
CVSS Base score: 7 CVSS Vector: (AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Exploit Code Maturity Remediation Level Report Confidence
Unproven that exploit exists Official fix Reasonable
CVSS Temporal score: 5.9 CVSS Vector: (AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R)
Attack Vector (MAV) Attack Complexity (MAC) Privileges Required (MPR) User Interaction (MUI) Scope (MS)
Local High None Required Unchanged
Confidentiality Impact (MC) Integrity Impact (MI) Availability Impact (MA)
High High High
Confidentiality Requirement (CR) Integrity Requirement (IR) Availability Requirement (AR)
High High High
CVSS Environmental score: 5.9 CVSS Vector: (AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R/CR:H/IR:H/AR:H/MAV:X/MAC:X/MPR:X/MUI:X/MS:X/MC:X/MI:X/MA:X)