# PostgreSQL psqlODBC vulnerabilities Source: https://junglewise.ai/threats/technologies/postgresql-psqlodbc Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/postgresql-psqlodbc.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 10 vulnerabilities in PostgreSQL psqlODBC: 0 in the last 7 days and 10 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-120067, was published on 2 November 2026. 10 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 10 - Last 90 days: 10 - All time: 10 (0 critical, 0 exploited in the wild) ## About PostgreSQL psqlODBC ODBC driver that provides connectivity between applications and PostgreSQL databases. ## Latest PostgreSQL psqlODBC vulnerabilities - [CVE-2026-120067: psqlODBC stack buffer overflow in updatable cursor handling](https://junglewise.ai/threats/cve-2026-120067-for-updatable-cursors-which-are-enabled-by-default-psqlodbc-adds) (medium, CVSS 5.9, published 2 Nov 2026) - [CVE-2026-120066: psqlODBC insecure log file handling on Unix systems](https://junglewise.ai/threats/cve-2026-120066-on-unix-like-systems-when-logging-is-enabled-psqlodbc-creates) (medium, CVSS 5.3, published 2 Nov 2026) - [CVE-2026-120065: psqlODBC SQL injection in row identification for updatable cursors](https://junglewise.ai/threats/cve-2026-120065-for-an-updatable-cursor-over-a-table-without-oids-that-has-an) (high, CVSS 7.1, published 2 Nov 2026) - [CVE-2026-120064: PostgreSQL psqlODBC array index validation buffer overflow](https://junglewise.ai/threats/cve-2026-120064-several-psqlodbc-entry-points-use-an-application-supplied-column) (high, CVSS 7.5, published 2 Nov 2026) - [CVE-2026-120063: psqlODBC stack buffer overflow in schema/table name quoting](https://junglewise.ai/threats/cve-2026-120063-when-psqlodbc-quotes-a-schema-or-table-name-into-a-128-byte) (medium, CVSS 5.9, published 2 Nov 2026) - [CVE-2026-120062: psqlODBC SQL injection in SQLSpecialColumns](https://junglewise.ai/threats/cve-2026-120062-sqlspecialcolumns-in-psqlodbc-splices-the-table-and-schema-names) (high, CVSS 7.5, published 2 Nov 2026) - [CVE-2026-120061: psqlODBC stack overflow in ODBC escape sequence parser](https://junglewise.ai/threats/cve-2026-120061-the-psqlodbc-parser-for-odbc-escape-sequences-in-application-sql) (high, CVSS 7.5, published 2 Nov 2026) - [CVE-2026-120060: psqlODBC unsafe handling of server-supplied counts and lengths](https://junglewise.ai/threats/cve-2026-120060-psqlodbc-trusts-counts-and-lengths-in-server-data-in-three) (medium, CVSS 5.9, published 2 Nov 2026) - [CVE-2026-120059: psqlODBC format string in auto-increment column name](https://junglewise.ai/threats/cve-2026-120059-for-an-updatable-cursor-over-a-table-without-oids-that-has-an) (medium, CVSS 6.8, published 2 Nov 2026) - [CVE-2026-120058: psqlODBC heap overflow in row cache handling](https://junglewise.ai/threats/cve-2026-120058-psqlodbc-sizes-its-row-cache-from-the-column-count-of-a-cursor-s) (high, CVSS 7.5, published 2 Nov 2026) ## Most severe PostgreSQL psqlODBC vulnerabilities - [CVE-2026-120064: PostgreSQL psqlODBC array index validation buffer overflow](https://junglewise.ai/threats/cve-2026-120064-several-psqlodbc-entry-points-use-an-application-supplied-column) (high, CVSS 7.5, published 2 Nov 2026) - [CVE-2026-120062: psqlODBC SQL injection in SQLSpecialColumns](https://junglewise.ai/threats/cve-2026-120062-sqlspecialcolumns-in-psqlodbc-splices-the-table-and-schema-names) (high, CVSS 7.5, published 2 Nov 2026) - [CVE-2026-120061: psqlODBC stack overflow in ODBC escape sequence parser](https://junglewise.ai/threats/cve-2026-120061-the-psqlodbc-parser-for-odbc-escape-sequences-in-application-sql) (high, CVSS 7.5, published 2 Nov 2026) - [CVE-2026-120058: psqlODBC heap overflow in row cache handling](https://junglewise.ai/threats/cve-2026-120058-psqlodbc-sizes-its-row-cache-from-the-column-count-of-a-cursor-s) (high, CVSS 7.5, published 2 Nov 2026) - [CVE-2026-120065: psqlODBC SQL injection in row identification for updatable cursors](https://junglewise.ai/threats/cve-2026-120065-for-an-updatable-cursor-over-a-table-without-oids-that-has-an) (high, CVSS 7.1, published 2 Nov 2026) - [CVE-2026-120059: psqlODBC format string in auto-increment column name](https://junglewise.ai/threats/cve-2026-120059-for-an-updatable-cursor-over-a-table-without-oids-that-has-an) (medium, CVSS 6.8, published 2 Nov 2026) - [CVE-2026-120067: psqlODBC stack buffer overflow in updatable cursor handling](https://junglewise.ai/threats/cve-2026-120067-for-updatable-cursors-which-are-enabled-by-default-psqlodbc-adds) (medium, CVSS 5.9, published 2 Nov 2026) - [CVE-2026-120063: psqlODBC stack buffer overflow in schema/table name quoting](https://junglewise.ai/threats/cve-2026-120063-when-psqlodbc-quotes-a-schema-or-table-name-into-a-128-byte) (medium, CVSS 5.9, published 2 Nov 2026) - [CVE-2026-120060: psqlODBC unsafe handling of server-supplied counts and lengths](https://junglewise.ai/threats/cve-2026-120060-psqlodbc-trusts-counts-and-lengths-in-server-data-in-three) (medium, CVSS 5.9, published 2 Nov 2026) - [CVE-2026-120066: psqlODBC insecure log file handling on Unix systems](https://junglewise.ai/threats/cve-2026-120066-on-unix-like-systems-when-logging-is-enabled-psqlodbc-creates) (medium, CVSS 5.3, published 2 Nov 2026) ## Vulnerabilities per week 10 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 10 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other PostgreSQL technologies - [PostgreSQL](https://junglewise.ai/threats/technologies/postgresql): 64 vulnerabilities - [PostgreSQL pgAdmin 4](https://junglewise.ai/threats/technologies/pgadmin-4): 26 vulnerabilities - [PostgreSQL PgBouncer](https://junglewise.ai/threats/technologies/pgbouncer): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "PostgreSQL psqlODBC vulnerabilities", https://junglewise.ai/threats/technologies/postgresql-psqlodbc, 13 November 2026.