CVE-2026-92869
Received Received - Intake

Out-of-Bounds Write in Pgpool-II

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: JPCERT/CC

Description
An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-92869
EUVD
EUVD-2026-89659

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
pgpool pgpool *-*-*-*-*-*-*

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an out-of-bounds write vulnerability in Pgpool-II. It allows an authenticated attacker to write data outside the intended memory area, which can cause the application to terminate abnormally.

Impact Analysis

An attacker could exploit this to crash the Pgpool-II service, leading to denial of service. It may also allow further unauthorized actions depending on the system configuration.

Mitigation Strategies

Update Pgpool-II to the latest patched version immediately to address the out-of-bounds write vulnerability. Monitor for abnormal process terminations in Pgpool-II instances and restrict authenticated access to trusted users only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92869. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart