🔐 CVE Alert

CVE-2026-92873

HIGH 7.3
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th

Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.

Vendor pgpool global development group
Product pgpool-ii
Published Sep 30, 2026
Stay Ahead of the Next One

Get instant alerts for pgpool global development group pgpool-ii

Be the first to know when new high vulnerabilities affecting pgpool global development group pgpool-ii are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Versions

Pgpool Global Development Group / Pgpool-II
4.7.0 ≤ 4.7.2 4.6.0 ≤ 4.6.7 4.5.0 ≤ 4.5.12 4.4.0 ≤ 4.4.17 4.3.0 ≤ 4.3.20 3.5.x ≤ 4.2.x

References

NVD ↗ CVE.org ↗ EPSS Data ↗
pgpool.net: https://pgpool.net/news/2026-09-29/ jvn.jp: https://jvn.jp/en/jp/JVN22475874/