THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-14681 (MEDIUM 4.2) — Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption a

[NVD] CVE-2026-14681 (MEDIUM 4.2) — Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption a

mednvdPublished 2026-08-13

CVE-2026-14681 CVSS: 4.2 MEDIUM Published: 2026-08-13T13:17:45.523

Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection. Despite a pg_hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS settings are more permissive than

Indicators of compromise

CVE-2026-14681cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-14681