ByteOS Network

NVD Vulnerability Details :

CVE-2026-2003

Awaiting Analysis

Source-f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

Published At-12 Feb, 2026 | 14:16

Updated At-12 Feb, 2026 | 15:10

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 4.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE ID	Type	Source
CWE-1287	Secondary	f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

CWE ID: CWE-1287

Type: Secondary

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

References

Hyperlink	Source	Resource
https://www.postgresql.org/support/security/CVE-2026-2003/	f86ef6dc-4d3a-42ad-8f28-e6d5547a5007	N/A

Hyperlink: https://www.postgresql.org/support/security/CVE-2026-2003/

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History