Security Feed

See the latest insights and analysis from our MDR team.
RSS for Slack
CVE-2026-14669
By Stav Salman | 
13 August 2026

PostgreSQL to_char(timestamptz) heap overflow enables OS-level code execution via POSIX timezone abbreviation

Heap buffer overflow in PostgreSQL to_char(timestamptz) allows a party that can choose the timezone to trigger memory corruption and execute arbitrary code as the OS user running the DB by supplying a long POSIX timezone abbreviation. Affects PostgreSQL < 18.5, < 17.11, < 16.15, < 15.19, < 14.24. Upgrade to 18.5/17.11/16.15/15.19/14.24 or later.

Full Feed
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS