THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-14671 (HIGH 8.8) — Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan ca

[NVD] CVE-2026-14671 (HIGH 8.8) — Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan ca

mednvdPublished 2026-08-13

CVE-2026-14671 CVSS: 8.8 HIGH Published: 2026-08-13T13:17:44.530

Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a CVE number. Versions before PostgreS

Indicators of compromise

CVE-2026-14671cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-14671