CVE-2026-14676

postgresql-18: Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operat...

CVE-2026-14676 is fixed in 68 products on 1 platform, first by RHSA-2026:67848, released July 18, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0044
38th percentile

Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before PostgreSQL 18 are unaffected.

Where it's fixed

ProductFixed inFixReleased
Linux
libecpg-compat3 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 libecpg-compat3 18.6-0ubuntu0.26.04.1 Aug 13, 2026
libecpg6 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 libecpg6 18.6-0ubuntu0.26.04.1 Aug 13, 2026
libpgtypes3 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 libpgtypes3 18.6-0ubuntu0.26.04.1 Aug 13, 2026
libpq-oauth · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 libpq-oauth 18.6-0ubuntu0.26.04.1 Aug 13, 2026
libpq5 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 libpq5 18.6-0ubuntu0.26.04.1 Aug 13, 2026
pg_repack · RHEL 9 0:1.5.3-1.module+el9.8.0+23739+1c42644c RHSA-2026:67848 Jul 18, 2026
pg_repack · almalinux 9 1.5.3-1.module_el9.8.0+234+5456f35d ALSA-2026:67848 Sep 16, 2026
pg_repack · ol 9 0:1.5.3-1.module+el9.8.0+90922+3defa420 ELSA-2026-67848 Sep 16, 2026
pg_repack · rocky 9 0:1.5.3-1.module+el9.8.0+40213+f1e225a4 RLSA-2026:67848 Sep 16, 2026
pgaudit · RHEL 9 0:18.0-1.module+el9.8.0+23739+1c42644c RHSA-2026:67848 Jul 18, 2026
pgaudit · almalinux 9 18.0-1.module_el9.8.0+234+5456f35d ALSA-2026:67848 Sep 16, 2026
pgaudit · ol 9 0:18.0-1.module+el9.8.0+90922+3defa420 ELSA-2026-67848 Sep 16, 2026
pgaudit · rocky 9 0:18.0-1.module+el9.8.0+40158+490b3c67 RLSA-2026:67848 Sep 16, 2026
pgvector · RHEL 9 0:0.8.1-1.module+el9.8.0+23739+1c42644c RHSA-2026:67848 Jul 18, 2026
pgvector · almalinux 9 0.8.1-1.module_el9.8.0+234+5456f35d ALSA-2026:67848 Sep 16, 2026
pgvector · ol 9 0:0.8.1-1.module+el9.8.0+90922+3defa420 ELSA-2026-67848 Sep 16, 2026
pgvector · rocky 9 0:0.8.1-1.module+el9.8.0+40158+490b3c67 RLSA-2026:67848 Sep 16, 2026
postgis · RHEL 9 0:3.6.1-4.module+el9.8.0+24879+1364ef12 RHSA-2026:67848 Jul 18, 2026
postgis · almalinux 9 3.6.1-4.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgis · ol 9 0:3.6.1-4.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgis-client · RHEL 9 0:3.6.1-4.module+el9.8.0+24879+1364ef12 RHSA-2026:67848 Jul 18, 2026
postgis-client · almalinux 9 3.6.1-4.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgis-client · ol 9 0:3.6.1-4.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgis-docs · RHEL 9 0:3.6.1-4.module+el9.8.0+24879+1364ef12 RHSA-2026:67848 Jul 18, 2026
postgis-docs · almalinux 9 3.6.1-4.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgis-docs · ol 9 0:3.6.1-4.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgis-upgrade · RHEL 9 0:3.6.1-4.module+el9.8.0+24879+1364ef12 RHSA-2026:67848 Jul 18, 2026
postgis-upgrade · almalinux 9 3.6.1-4.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgis-upgrade · ol 9 0:3.6.1-4.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgis-utils · RHEL 9 0:3.6.1-4.module+el9.8.0+24879+1364ef12 RHSA-2026:67848 Jul 18, 2026
postgis-utils · almalinux 9 3.6.1-4.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgis-utils · ol 9 0:3.6.1-4.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgres-decoderbufs · RHEL 9 0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c RHSA-2026:67848 Jul 18, 2026
postgres-decoderbufs · almalinux 9 3.3.1-1.Final.module_el9.8.0+234+5456f35d ALSA-2026:67848 Sep 16, 2026
postgres-decoderbufs · ol 9 0:3.3.1-1.Final.module+el9.8.0+90922+3defa420 ELSA-2026-67848 Sep 16, 2026
postgres-decoderbufs · rocky 9 0:3.3.1-1.Final.module+el9.8.0+40213+f1e225a4 RLSA-2026:67848 Sep 16, 2026
postgresql · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-18 · Debian 14 18.6-1 DEBIAN-CVE-2026-14676 Aug 23, 2026
postgresql-18 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 postgresql-18 18.6-0ubuntu0.26.04.1 Aug 13, 2026
postgresql-18-jit · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 postgresql-18-jit 18.6-0ubuntu0.26.04.1 Aug 13, 2026
postgresql-client-18 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 postgresql-client-18 18.6-0ubuntu0.26.04.1 Aug 13, 2026
postgresql-contrib · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-contrib · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-contrib · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-doc-18 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 postgresql-doc-18 18.6-0ubuntu0.26.04.1 Aug 13, 2026
postgresql-docs · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-docs · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-docs · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-plperl · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-plperl · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-plperl · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-plperl-18 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 postgresql-plperl-18 18.6-0ubuntu0.26.04.1 Aug 13, 2026
postgresql-plpython3 · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-plpython3 · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-plpython3 · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-plpython3-18 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 postgresql-plpython3-18 18.6-0ubuntu0.26.04.1 Aug 13, 2026
postgresql-pltcl · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-pltcl · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-pltcl · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-pltcl-18 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 postgresql-pltcl-18 18.6-0ubuntu0.26.04.1 Aug 13, 2026
postgresql-private-devel · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-private-devel · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-private-devel · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-private-libs · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-private-libs · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-private-libs · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-server · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-server · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-server · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-server-dev-18 · Ubuntu 26.04.1 LTS (resolute) 18.6-0ubuntu0.26.04.1 postgresql-server-dev-18 18.6-0ubuntu0.26.04.1 Aug 13, 2026
postgresql-server-devel · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-server-devel · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-server-devel · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-static · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-static · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-static · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-test · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-test · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-test · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-test-rpm-macros · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-test-rpm-macros · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-test-rpm-macros · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-upgrade · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-upgrade · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-upgrade · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql-upgrade-devel · RHEL 9 0:18.6-1.module+el9.8.0+24816+5c11f535 RHSA-2026:67848 Jul 18, 2026
postgresql-upgrade-devel · almalinux 9 18.6-1.module_el9.8.0+310+22372bcc ALSA-2026:67848 Sep 16, 2026
postgresql-upgrade-devel · ol 9 0:18.6-1.module+el9.8.0+91037+efa47639 ELSA-2026-67848 Sep 16, 2026
postgresql18 · RHEL 10 18.6-1.el10_2 RHSA-2026:67280 Jul 18, 2026
postgresql18 · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18 · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18 · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18 · opensuse-leap 16.0 18.6-160000.1.1 OPENSUSE-SU-2026:21703-1 Aug 30, 2026
postgresql18 · rocky 10 0:18.6-1.el10_2 RLSA-2026:67280 Sep 15, 2026
postgresql18 · sles 15.6 18.6-150600.13.16.1 SUSE-SU-2026:4014-1 Sep 7, 2026
postgresql18 · sles 15.7 18.6-150600.13.16.1 SUSE-SU-2026:4014-1 Sep 7, 2026
postgresql18 · sles 16.0 18.6-160000.1.1 SUSE-SU-2026:23577-1 Aug 30, 2026
postgresql18-contrib · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-contrib · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-contrib · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-contrib-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-debugsource · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-docs · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-docs · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-docs · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-docs-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-llvmjit · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-llvmjit-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-mini · opensuse-leap 16.0 18.6-160000.1.1 OPENSUSE-SU-2026:21703-1 Aug 30, 2026
postgresql18-plperl · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-plperl · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-plperl · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-plperl-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-plpython3 · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-plpython3 · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-plpython3 · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-plpython3-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-pltcl · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-pltcl-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-private-devel · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-private-devel · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-private-devel · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-private-libs · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-private-libs · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-private-libs · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-private-libs-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-server · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-server · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-server · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-server-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-server-devel · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-server-devel · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-server-devel · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-server-devel-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-static · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-static · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-static · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-test · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-test · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-test · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-test-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-test-rpm-macros · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-test-rpm-macros · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-test-rpm-macros · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-upgrade · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-upgrade · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-upgrade · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-upgrade-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-upgrade-devel · almalinux 10 18.6-1.el10_2 ALSA-2026:67280 Sep 14, 2026
postgresql18-upgrade-devel · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026
postgresql18-upgrade-devel · ol 10 0:18.6-1.0.1.el10_2 ELSA-2026-67280-0 Sep 15, 2026
postgresql18-upgrade-devel-debuginfo · amzn 2023 18.6-1.amzn2023.0.1 ALAS2023-2026-2079 Aug 31, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.