{"schema_version":1,"title":"Pgpool Global Development Group Pgpool-II vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Pgpool Global Development Group Pgpool-II: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-92873, was published on 30 September 2026. Nothing in the last four weeks, down from 7 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/technologies/pgpool-ii","json_url":"https://junglewise.ai/threats/technologies/pgpool-ii.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/pgpool-ii","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":4,"all_time":7,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":7,"last_365_days":7},"latest":[{"cve":"CVE-2026-92873","cvss":7.3,"slug":"cve-2026-92873-pgpool-ii-contains-an-incorrect-implementation-of-an","title":"Pgpool-II authentication bypass in watchdog promotion","severity":"high","exploited":false,"published_at":"2026-09-30T08:16:35.493+00:00","url":"https://junglewise.ai/threats/cve-2026-92873-pgpool-ii-contains-an-incorrect-implementation-of-an"},{"cve":"CVE-2026-92872","cvss":4.3,"slug":"cve-2026-92872-pgpool-ii-inserts-sensitive-information-into-log-file-which-may","title":"Pgpool-II sensitive information insertion into log file","severity":"medium","exploited":false,"published_at":"2026-09-30T08:16:35.347+00:00","url":"https://junglewise.ai/threats/cve-2026-92872-pgpool-ii-inserts-sensitive-information-into-log-file-which-may"},{"cve":"CVE-2026-92871","cvss":7.5,"slug":"cve-2026-92871-a-null-pointer-dereference-vulnerability-exists-in-pgpool-ii","title":"Pgpool-II NULL pointer dereference in watchdog","severity":"high","exploited":false,"published_at":"2026-09-30T08:16:35.193+00:00","url":"https://junglewise.ai/threats/cve-2026-92871-a-null-pointer-dereference-vulnerability-exists-in-pgpool-ii"},{"cve":"CVE-2026-92870","cvss":7.5,"slug":"cve-2026-92870-a-stack-based-buffer-overflow-vulnerability-exists-in-pgpool-ii","title":"Pgpool-II stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-30T08:16:35.04+00:00","url":"https://junglewise.ai/threats/cve-2026-92870-a-stack-based-buffer-overflow-vulnerability-exists-in-pgpool-ii"},{"cve":"CVE-2026-92869","cvss":6.5,"slug":"cve-2026-92869-an-out-of-bounds-write-vulnerability-exists-in-pgpool-ii-which","title":"Pgpool-II out-of-bounds write in watchdog message processing","severity":"medium","exploited":false,"published_at":"2026-09-30T08:16:34.877+00:00","url":"https://junglewise.ai/threats/cve-2026-92869-an-out-of-bounds-write-vulnerability-exists-in-pgpool-ii-which"},{"cve":"CVE-2026-92868","cvss":6.5,"slug":"cve-2026-92868-an-improper-certificate-validation-vulnerability-exists-in-pgpool","title":"Pgpool-II client certificate authentication bypass via NUL byte injection","severity":"medium","exploited":false,"published_at":"2026-09-30T08:16:34.723+00:00","url":"https://junglewise.ai/threats/cve-2026-92868-an-improper-certificate-validation-vulnerability-exists-in-pgpool"},{"cve":"CVE-2026-92867","cvss":8.8,"slug":"cve-2026-92867-an-out-of-bounds-write-vulnerability-exists-in-pgpool-ii-which","title":"Pgpool-II out-of-bounds write in watchdog message processing","severity":"high","exploited":false,"published_at":"2026-09-30T08:16:34.557+00:00","url":"https://junglewise.ai/threats/cve-2026-92867-an-out-of-bounds-write-vulnerability-exists-in-pgpool-ii-which"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Pgpool Global Development Group Pgpool-II","slug":"pgpool-ii","vendor":{"hub":true,"name":"Pgpool Global Development Group","slug":"pgpool-global-development-group","url":"https://junglewise.ai/threats/vendors/pgpool-global-development-group"},"aliases":[],"category":"connection-pool","description":"PostgreSQL connection pooling and load balancing middleware for database query routing.","url":"https://junglewise.ai/threats/technologies/pgpool-ii"},"most_severe":[{"cve":"CVE-2026-92867","cvss":8.8,"slug":"cve-2026-92867-an-out-of-bounds-write-vulnerability-exists-in-pgpool-ii-which","title":"Pgpool-II out-of-bounds write in watchdog message processing","severity":"high","exploited":false,"published_at":"2026-09-30T08:16:34.557+00:00","url":"https://junglewise.ai/threats/cve-2026-92867-an-out-of-bounds-write-vulnerability-exists-in-pgpool-ii-which"},{"cve":"CVE-2026-92871","cvss":7.5,"slug":"cve-2026-92871-a-null-pointer-dereference-vulnerability-exists-in-pgpool-ii","title":"Pgpool-II NULL pointer dereference in watchdog","severity":"high","exploited":false,"published_at":"2026-09-30T08:16:35.193+00:00","url":"https://junglewise.ai/threats/cve-2026-92871-a-null-pointer-dereference-vulnerability-exists-in-pgpool-ii"},{"cve":"CVE-2026-92870","cvss":7.5,"slug":"cve-2026-92870-a-stack-based-buffer-overflow-vulnerability-exists-in-pgpool-ii","title":"Pgpool-II stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-30T08:16:35.04+00:00","url":"https://junglewise.ai/threats/cve-2026-92870-a-stack-based-buffer-overflow-vulnerability-exists-in-pgpool-ii"},{"cve":"CVE-2026-92873","cvss":7.3,"slug":"cve-2026-92873-pgpool-ii-contains-an-incorrect-implementation-of-an","title":"Pgpool-II authentication bypass in watchdog promotion","severity":"high","exploited":false,"published_at":"2026-09-30T08:16:35.493+00:00","url":"https://junglewise.ai/threats/cve-2026-92873-pgpool-ii-contains-an-incorrect-implementation-of-an"},{"cve":"CVE-2026-92869","cvss":6.5,"slug":"cve-2026-92869-an-out-of-bounds-write-vulnerability-exists-in-pgpool-ii-which","title":"Pgpool-II out-of-bounds write in watchdog message processing","severity":"medium","exploited":false,"published_at":"2026-09-30T08:16:34.877+00:00","url":"https://junglewise.ai/threats/cve-2026-92869-an-out-of-bounds-write-vulnerability-exists-in-pgpool-ii-which"},{"cve":"CVE-2026-92868","cvss":6.5,"slug":"cve-2026-92868-an-improper-certificate-validation-vulnerability-exists-in-pgpool","title":"Pgpool-II client certificate authentication bypass via NUL byte injection","severity":"medium","exploited":false,"published_at":"2026-09-30T08:16:34.723+00:00","url":"https://junglewise.ai/threats/cve-2026-92868-an-improper-certificate-validation-vulnerability-exists-in-pgpool"},{"cve":"CVE-2026-92872","cvss":4.3,"slug":"cve-2026-92872-pgpool-ii-inserts-sensitive-information-into-log-file-which-may","title":"Pgpool-II sensitive information insertion into log file","severity":"medium","exploited":false,"published_at":"2026-09-30T08:16:35.347+00:00","url":"https://junglewise.ai/threats/cve-2026-92872-pgpool-ii-inserts-sensitive-information-into-log-file-which-may"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}