{"schema_version":1,"title":"PostgreSQL psqlODBC vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in PostgreSQL psqlODBC: 0 in the last 7 days and 10 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-120067, was published on 2 November 2026. 10 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/postgresql-psqlodbc","json_url":"https://junglewise.ai/threats/technologies/postgresql-psqlodbc.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/postgresql-psqlodbc","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":5,"all_time":10,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":10,"last_90_days":10,"last_365_days":10},"latest":[{"cve":"CVE-2026-120067","cvss":5.9,"slug":"cve-2026-120067-for-updatable-cursors-which-are-enabled-by-default-psqlodbc-adds","title":"psqlODBC stack buffer overflow in updatable cursor handling","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:04.12+00:00","url":"https://junglewise.ai/threats/cve-2026-120067-for-updatable-cursors-which-are-enabled-by-default-psqlodbc-adds"},{"cve":"CVE-2026-120066","cvss":5.3,"slug":"cve-2026-120066-on-unix-like-systems-when-logging-is-enabled-psqlodbc-creates","title":"psqlODBC insecure log file handling on Unix systems","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:03.983+00:00","url":"https://junglewise.ai/threats/cve-2026-120066-on-unix-like-systems-when-logging-is-enabled-psqlodbc-creates"},{"cve":"CVE-2026-120065","cvss":7.1,"slug":"cve-2026-120065-for-an-updatable-cursor-over-a-table-without-oids-that-has-an","title":"psqlODBC SQL injection in row identification for updatable cursors","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:03.85+00:00","url":"https://junglewise.ai/threats/cve-2026-120065-for-an-updatable-cursor-over-a-table-without-oids-that-has-an"},{"cve":"CVE-2026-120064","cvss":7.5,"slug":"cve-2026-120064-several-psqlodbc-entry-points-use-an-application-supplied-column","title":"PostgreSQL psqlODBC array index validation buffer overflow","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:03.707+00:00","url":"https://junglewise.ai/threats/cve-2026-120064-several-psqlodbc-entry-points-use-an-application-supplied-column"},{"cve":"CVE-2026-120063","cvss":5.9,"slug":"cve-2026-120063-when-psqlodbc-quotes-a-schema-or-table-name-into-a-128-byte","title":"psqlODBC stack buffer overflow in schema/table name quoting","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:03.557+00:00","url":"https://junglewise.ai/threats/cve-2026-120063-when-psqlodbc-quotes-a-schema-or-table-name-into-a-128-byte"},{"cve":"CVE-2026-120062","cvss":7.5,"slug":"cve-2026-120062-sqlspecialcolumns-in-psqlodbc-splices-the-table-and-schema-names","title":"psqlODBC SQL injection in SQLSpecialColumns","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:03.423+00:00","url":"https://junglewise.ai/threats/cve-2026-120062-sqlspecialcolumns-in-psqlodbc-splices-the-table-and-schema-names"},{"cve":"CVE-2026-120061","cvss":7.5,"slug":"cve-2026-120061-the-psqlodbc-parser-for-odbc-escape-sequences-in-application-sql","title":"psqlODBC stack overflow in ODBC escape sequence parser","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:03.273+00:00","url":"https://junglewise.ai/threats/cve-2026-120061-the-psqlodbc-parser-for-odbc-escape-sequences-in-application-sql"},{"cve":"CVE-2026-120060","cvss":5.9,"slug":"cve-2026-120060-psqlodbc-trusts-counts-and-lengths-in-server-data-in-three","title":"psqlODBC unsafe handling of server-supplied counts and lengths","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:03.137+00:00","url":"https://junglewise.ai/threats/cve-2026-120060-psqlodbc-trusts-counts-and-lengths-in-server-data-in-three"},{"cve":"CVE-2026-120059","cvss":6.8,"slug":"cve-2026-120059-for-an-updatable-cursor-over-a-table-without-oids-that-has-an","title":"psqlODBC format string in auto-increment column name","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:02.993+00:00","url":"https://junglewise.ai/threats/cve-2026-120059-for-an-updatable-cursor-over-a-table-without-oids-that-has-an"},{"cve":"CVE-2026-120058","cvss":7.5,"slug":"cve-2026-120058-psqlodbc-sizes-its-row-cache-from-the-column-count-of-a-cursor-s","title":"psqlODBC heap overflow in row cache handling","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:02.857+00:00","url":"https://junglewise.ai/threats/cve-2026-120058-psqlodbc-sizes-its-row-cache-from-the-column-count-of-a-cursor-s"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":10},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"PostgreSQL","slug":"postgresql","vulnerabilities":64,"url":"https://junglewise.ai/threats/technologies/postgresql"},{"name":"PostgreSQL pgAdmin 4","slug":"pgadmin-4","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/pgadmin-4"},{"name":"PostgreSQL PgBouncer","slug":"pgbouncer","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/pgbouncer"}],"technology":{"hub":true,"name":"PostgreSQL psqlODBC","slug":"postgresql-psqlodbc","vendor":{"hub":true,"name":"PostgreSQL","slug":"postgresql","url":"https://junglewise.ai/threats/vendors/postgresql"},"aliases":[],"category":"library","description":"ODBC driver that provides connectivity between applications and PostgreSQL databases.","url":"https://junglewise.ai/threats/technologies/postgresql-psqlodbc"},"most_severe":[{"cve":"CVE-2026-120064","cvss":7.5,"slug":"cve-2026-120064-several-psqlodbc-entry-points-use-an-application-supplied-column","title":"PostgreSQL psqlODBC array index validation buffer overflow","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:03.707+00:00","url":"https://junglewise.ai/threats/cve-2026-120064-several-psqlodbc-entry-points-use-an-application-supplied-column"},{"cve":"CVE-2026-120062","cvss":7.5,"slug":"cve-2026-120062-sqlspecialcolumns-in-psqlodbc-splices-the-table-and-schema-names","title":"psqlODBC SQL injection in SQLSpecialColumns","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:03.423+00:00","url":"https://junglewise.ai/threats/cve-2026-120062-sqlspecialcolumns-in-psqlodbc-splices-the-table-and-schema-names"},{"cve":"CVE-2026-120061","cvss":7.5,"slug":"cve-2026-120061-the-psqlodbc-parser-for-odbc-escape-sequences-in-application-sql","title":"psqlODBC stack overflow in ODBC escape sequence parser","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:03.273+00:00","url":"https://junglewise.ai/threats/cve-2026-120061-the-psqlodbc-parser-for-odbc-escape-sequences-in-application-sql"},{"cve":"CVE-2026-120058","cvss":7.5,"slug":"cve-2026-120058-psqlodbc-sizes-its-row-cache-from-the-column-count-of-a-cursor-s","title":"psqlODBC heap overflow in row cache handling","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:02.857+00:00","url":"https://junglewise.ai/threats/cve-2026-120058-psqlodbc-sizes-its-row-cache-from-the-column-count-of-a-cursor-s"},{"cve":"CVE-2026-120065","cvss":7.1,"slug":"cve-2026-120065-for-an-updatable-cursor-over-a-table-without-oids-that-has-an","title":"psqlODBC SQL injection in row identification for updatable cursors","severity":"high","exploited":false,"published_at":"2026-11-02T19:18:03.85+00:00","url":"https://junglewise.ai/threats/cve-2026-120065-for-an-updatable-cursor-over-a-table-without-oids-that-has-an"},{"cve":"CVE-2026-120059","cvss":6.8,"slug":"cve-2026-120059-for-an-updatable-cursor-over-a-table-without-oids-that-has-an","title":"psqlODBC format string in auto-increment column name","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:02.993+00:00","url":"https://junglewise.ai/threats/cve-2026-120059-for-an-updatable-cursor-over-a-table-without-oids-that-has-an"},{"cve":"CVE-2026-120067","cvss":5.9,"slug":"cve-2026-120067-for-updatable-cursors-which-are-enabled-by-default-psqlodbc-adds","title":"psqlODBC stack buffer overflow in updatable cursor handling","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:04.12+00:00","url":"https://junglewise.ai/threats/cve-2026-120067-for-updatable-cursors-which-are-enabled-by-default-psqlodbc-adds"},{"cve":"CVE-2026-120063","cvss":5.9,"slug":"cve-2026-120063-when-psqlodbc-quotes-a-schema-or-table-name-into-a-128-byte","title":"psqlODBC stack buffer overflow in schema/table name quoting","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:03.557+00:00","url":"https://junglewise.ai/threats/cve-2026-120063-when-psqlodbc-quotes-a-schema-or-table-name-into-a-128-byte"},{"cve":"CVE-2026-120060","cvss":5.9,"slug":"cve-2026-120060-psqlodbc-trusts-counts-and-lengths-in-server-data-in-three","title":"psqlODBC unsafe handling of server-supplied counts and lengths","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:03.137+00:00","url":"https://junglewise.ai/threats/cve-2026-120060-psqlodbc-trusts-counts-and-lengths-in-server-data-in-three"},{"cve":"CVE-2026-120066","cvss":5.3,"slug":"cve-2026-120066-on-unix-like-systems-when-logging-is-enabled-psqlodbc-creates","title":"psqlODBC insecure log file handling on Unix systems","severity":"medium","exploited":false,"published_at":"2026-11-02T19:18:03.983+00:00","url":"https://junglewise.ai/threats/cve-2026-120066-on-unix-like-systems-when-logging-is-enabled-psqlodbc-creates"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}