CVE-2026-92873

HIGH CVSS 7.3 View on NVD ↗

Description

Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

https://jvn.jp/en/jp/JVN22475874/
https://pgpool.net/news/2026-09-29/

Published: Sep 30, 2026 08:16 UTC Modified: Sep 30, 2026 17:16 UTC