[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-78155":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-23T18:46:18.887Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":150,"aliases":151,"duplicate_of":9,"upstream":152,"downstream":153,"duplicates":154,"related":155,"reserved_at":9,"published_at":156,"modified_at":156,"state":157,"summary":158,"references_raw":167,"kevs":173,"epss":174,"epss_history":177,"metrics":179,"affected":187},"CVE-2026-78155","privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-426","Untrusted Search Path","The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.","weakness","Stable","Base","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-38","Leveraging/Manipulating Configuration File Search Paths",[24,110],{"id":25,"name":26,"tactics":27,"countermeasures":43},"T1574.007","Path Interception by PATH Environment Variable",[28,31,34,37,40],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",{"id":35,"name":36},"TA0030","Defense Evasion",{"id":38,"name":39},"TA0005","Stealth",{"id":41,"name":42},"TA0104","Execution",[44,49,54,59,64,68,72,77,81,85,89,93,97,101,105],{"id":45,"name":46,"tactic":47},"D3-EFA","Emulated File Analysis",{"name":48},"Detect",{"id":50,"name":51,"tactic":52},"D3-DF","Decoy File",{"name":53},"Deceive",{"id":55,"name":56,"tactic":57},"D3-RF","Restore File",{"name":58},"Restore",{"id":60,"name":61,"tactic":62},"D3-FE","File Encryption",{"name":63},"Harden",{"id":65,"name":66,"tactic":67},"D3-FA","File Analysis",{"name":48},{"id":69,"name":70,"tactic":71},"D3-DA","Dynamic Analysis",{"name":48},{"id":73,"name":74,"tactic":75},"D3-CF","Content Filtering",{"name":76},"Isolate",{"id":78,"name":79,"tactic":80},"D3-LFP","Local File Permissions",{"name":76},{"id":82,"name":83,"tactic":84},"D3-FIM","File Integrity Monitoring",{"name":48},{"id":86,"name":87,"tactic":88},"D3-RFAM","Remote File Access Mediation",{"name":76},{"id":90,"name":91,"tactic":92},"D3-CQ","Content Quarantine",{"name":76},{"id":94,"name":95,"tactic":96},"D3-CM","Content Modification",{"name":76},{"id":98,"name":99,"tactic":100},"D3-EAL","Executable Allowlisting",{"name":76},{"id":102,"name":103,"tactic":104},"D3-EDL","Executable Denylisting",{"name":76},{"id":106,"name":107,"tactic":108},"D3-FEV","File Eviction",{"name":109},"Evict",{"id":111,"name":112,"tactics":113,"countermeasures":119},"T1574.009","Path Interception by Unquoted Path",[114,115,116,117,118],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[120,122,124,126,128,130,132,134,136,138,140,142,144,146,148],{"id":73,"name":74,"tactic":121},{"name":76},{"id":55,"name":56,"tactic":123},{"name":58},{"id":50,"name":51,"tactic":125},{"name":53},{"id":69,"name":70,"tactic":127},{"name":48},{"id":82,"name":83,"tactic":129},{"name":48},{"id":78,"name":79,"tactic":131},{"name":76},{"id":86,"name":87,"tactic":133},{"name":76},{"id":90,"name":91,"tactic":135},{"name":76},{"id":94,"name":95,"tactic":137},{"name":76},{"id":45,"name":46,"tactic":139},{"name":48},{"id":65,"name":66,"tactic":141},{"name":48},{"id":98,"name":99,"tactic":143},{"name":76},{"id":102,"name":103,"tactic":145},{"name":76},{"id":106,"name":107,"tactic":147},{"name":109},{"id":60,"name":61,"tactic":149},{"name":63},[],[],[],[],[],[],"2026-08-23T09:26:46.103Z","Received",{"cisa_kev":159,"cisa_ransomware":159,"cisa_vendor":9,"epss_severity":160,"epss_score":161,"severity":162,"severity_score":163,"severity_version":164,"severity_source":165,"severity_vector":166,"severity_status":157},false,"low",0.00479,"critical",9.9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",[168],{"url":169,"sources":170,"tags":172},"https://gitlab.com/ongresinc/stackgres/-/work_items/3177",[165,171],"nvd",[],[],{"date":175,"score":161,"percentile":176},"2026-08-23",0.39513,[178],{"date":175,"score":161,"percentile":176},[180,185],{"source":165,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":181,"cvss_v4_0":9},{"baseScore":163,"baseSeverity":182,"vectorString":166,"impactScore":183,"exploitabilityScore":184},"CRITICAL",10,7.9,{"source":171,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":186,"cvss_v4_0":9},{"baseScore":163,"baseSeverity":182,"vectorString":166,"impactScore":183,"exploitabilityScore":184},[188],{"ecosystem":9,"name":189,"vendor":190,"product":191,"cpe_part":192,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":193},"StackGres","ongres","stackgres","a",[194],{"version":195,"is_range":196,"range_type":165,"version_start":9,"version_start_type":9,"version_end":197,"version_end_type":198,"fixed_in":9},"\u003C= 1.18.8",true,"1.18.8","including"]