What the vulnerability does
01Description
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
CVSS base score
—
Key dates
02Disclosure timeline
March 12, 2026
CVE published
May 10, 2026
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2025-55156 PyLoad vulnerable to SQL Injection via API /json/add_package in add_links parameter
CVE-2025-62728 Apache Hive: SQL injection vulnerability when processing delete column statistics requests via the HMS Thrift APIs
CVE-2024-7196 SourceCodester Complaints Report Management System sql injection
CVE-2025-10662 SeaCMS admin_members.php sql injection
CVE-2023-4844 SourceCodester Simple Membership System club_edit_query.php sql injection
