CVE-2026-6479: postgresql Uncontrolled Recursion

CVSS: 7.5v3.1HighAnalyzed

AliasesALPINE-CVE-2026-6479RHSA-2026:52395RHSA-2026:52396+8 more

Published 14-05-2026Last modified 14-05-2026

Vulnerability summary

CVE-2026-6479 is a high (CVSS 7.5) Uncontrolled Recursion vulnerability in postgresql. EPSS estimates a 0.60% chance of exploitation in the next 30 days, higher than 47.4% of scored vulnerabilities.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

0.60%

0%100%

Low · +0.12 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

14-05-2026
PublishedVulnerability first disclosed.
14-05-2026
Last modifiedVulnerability information updated.

Description

Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled, an attacker can do the same via access to a PostgreSQL TCP socket. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

CVSS metrics

6 scores · 6 sources · 1 version

v3.17.5

EPSS trend

Probability

0.60%

Chance of exploitation in the next 30 days

Percentile

47%

Versus all other CVEs

30-day change

+0.12 pp

From 0.47% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.60%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-674Uncontrolled RecursionThe product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Affected systems

Redhat37 products

pg_repack< 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf | < 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5
pg_repack-debuginfo< 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf | < 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5
pg_repack-debugsource< 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf | < 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5
pgaudit< 0:1.4.0-7.module+el8.10.0+22214+9beb89d6 | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5
pgaudit-debuginfo< 0:1.4.0-7.module+el8.10.0+22214+9beb89d6 | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5

pgaudit-debugsource< 0:1.4.0-7.module+el8.10.0+22214+9beb89d6 | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5
postgres-decoderbufs< 0:0.10.0-2.module+el8.9.0+19330+c97ddbdf | < 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 | < 0:0.10.0-2.module+el8.5.0+11354+78b3c9c5
postgres-decoderbufs-debuginfo< 0:0.10.0-2.module+el8.9.0+19330+c97ddbdf | < 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 | < 0:0.10.0-2.module+el8.5.0+11354+78b3c9c5
postgres-decoderbufs-debugsource< 0:0.10.0-2.module+el8.9.0+19330+c97ddbdf | < 0:0.10.0-2.module+el8.4.0+11288+c193d6d7 | < 0:0.10.0-2.module+el8.5.0+11354+78b3c9c5
postgresql< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-contrib< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-contrib-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-debugsource< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-docs< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-docs-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-plperl< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-plperl-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-plpython3< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-plpython3-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-pltcl< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-pltcl-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-private-devel< 0:13.23-5.el9_8 | < 0:13.23-1.el9_6.4
postgresql-private-libs< 0:13.23-5.el9_8 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4
postgresql-private-libs-debuginfo< 0:13.23-5.el9_8 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4
postgresql-server< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-server-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-server-devel< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-server-devel-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-static< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-test< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-test-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-test-rpm-macros< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-upgrade< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-upgrade-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-upgrade-devel< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5
postgresql-upgrade-devel-debuginfo< 0:13.23-5.el9_8 | < 0:12.22-9.module+el8.10.0+24635+941a3cac | < 0:12.22-1.module+el8.6.0+24734+8d3d63df.5 | < 0:12.22-1.module+el8.4.0+24733+2481cd1e.5 | < 0:13.23-1.el9_6.4 | < 0:13.23-1.el9_4.3 | < 0:13.23-1.el9_2.4 | < 0:12.22-1.module+el8.8.0+24736+651c3817.5

Show all 37

Ubuntu8 products

postgresql-10All versions (No fix recorded)
postgresql-12All versions (No fix recorded)
postgresql-14< 14.23-0ubuntu0.22.04.1
postgresql-16< 16.14-0ubuntu0.24.04.1
postgresql-17< 17.10-0ubuntu0.25.10.1

Show all 8

Alpine4 products

postgresql15< 15.18-r0
postgresql16< 16.14-r0
postgresql17< 17.10-r0
postgresql18< 18.4-r0

Debian3 products

postgresql-15< 15.18-0+deb12u1
postgresql-17< 17.10-0+deb13u1
postgresql-18< 18.4-1

Postgresql1 product

postgresql< 14.23 | ≥ 15.0, < 15.18 | ≥ 16.0, < 16.14 | ≥ 17.0, < 17.10 | ≥ 18.0, < 18.4

5 vendors · 53 products

References

27 links

www.postgresql.org/support/security/CVE-2026-6479/ARTICLEREPORTPatchVendor Advisory
security.alpinelinux.org/vuln/CVE-2026-6479Advisory
access.redhat.com/errata/RHSA-2026:52395Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2477445REPORT
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52395.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-6479REPORT
www.cve.org/CVERecord?id=CVE-2026-6479AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2026-6479AdvisoryOval
access.redhat.com/errata/RHSA-2026:52396Advisory

Show all 27 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities