PgPool Global Development Group Pgpool-II

• CVE-2026-92873 High 7.3 Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node. 0.3%
• CVE-2026-92872 Medium 4.3 Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the cluster information. 0.2%
• CVE-2026-92871 High 7.5 A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process. 0.3%
• CVE-2026-92870 High 7.5 A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination. 0.3%
• CVE-2026-92869 Medium 6.5 An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination. 0.2%
• CVE-2026-92868 Medium 6.5 An improper certificate validation vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to bypass client certificate authentication. 0.2%
• CVE-2026-92867 High 8.8 An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution. 0.3%
• CVE-2025-46801 Critical 9.8 Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the s 0.9%
• CVE-2024-45624 High 7.5 Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved. 0.5%
• CVE-2023-22332 Medium 6.5 Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4.3.4 (4.3 series), 4.2.0 to 4.2.11 (4.2 series), 4.1.0 to 4.1.14 (4.1 series), 4.0.0 to 4.0.21 (4.0 seri 0.7%