TECH NEWS

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

PostgreSQL releases since 2014 contain a severe vulnerability that allows attacker with low privileges to take over databases and servers, cybersecurity firm Cyera reports.

An open source relational database system offering support for both relational (SQL) and non-relational (JSON) queries, PostgreSQL is one of the most popular databases, being used by tens of thousands of companies, including large enterprises.

Tracked as CVE-2026-6471 (CVSS score of 7.2) and referred to as PostGREShell, the recently identified security defect can be exploited for remote code execution and privilege escalation.

It is described as a missing authorization in the database’s logical decoding and can be exploited by attackers that have ‘Replication’ privileges to load any file visible to the OS account running the server, via the logical decoding plugin.

PostgreSQL, Cyera explains, uses a dedicated replication protocol to sync multiple replicas of any primary database, for backup and recovery. An account with the...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

https://www.bleepstatic.com/content/hl-images/2026/05/29/Prison-man.jpg

A US court sentences Ukrainian Oleksii Lytvynenko to four years in prison for conspiracy to commit wire fraud in connection with the Conti ransomware attacks

Sponsor Posts Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens. Cloudflare Connect 2026: The Agentic Conference — Stop preparing for agents. Start running

Weekly AI, cybersecurity update: Microsoft, Google fix over 1000 bugs, Anthropic blocks bio-weapons supporting AI

AI is changing the digital world rapidly. From enabling users to work efficiently to helping companies up their cybersecurity game to becoming a borderline threat, AI is actively help evolve the global cybersecurity landscape. The past week brought fresh evidence of this ongoing fundamental shift. On one hand we saw

https://www.cnet.com/wp-content/uploads/sites/2/Alan-Cumming-The-Traitors-New-Blood1.jpg

What’s New on Peacock in September 2026? New Seasons of ‘The Traitors,’ ‘The Paper,’ the Emmys and More

Peacock is home to some of the most addictive original reality series out there, including The Traitors, Love Island and House of Villains. It’s also the streaming home to Bravo franchises such as The Real Housewives, Summer House and Top Chef. But even though the platform boasts a fantastic

https://www.cnet.com/wp-content/uploads/sites/2/260910_CLEAN_OMT_EP_188_THE-APPLE-EVENT-SHOW_v2.jpg

The iPhone Duo Event Left Me With Big Questions - CNET

Our expert, award-winning staff selects the products we cover and rigorously researches and tests our top picks. If you buy through our links, we may earn a commission. Bridget Carey is an award-winning consumer technology reporter and host of the weekly Apple show, "One More Thing." INSIDE CNET

Read more

A US court sentences Ukrainian Oleksii Lytvynenko to four years in prison for conspiracy to commit wire fraud in connection with the Conti ransomware attacks

Weekly AI, cybersecurity update: Microsoft, Google fix over 1000 bugs, Anthropic blocks bio-weapons supporting AI

What’s New on Peacock in September 2026? New Seasons of ‘The Traitors,’ ‘The Paper,’ the Emmys and More

The iPhone Duo Event Left Me With Big Questions - CNET