GIGAZINE

SQL injection vulnerability in PostgreSQL went undiscovered for over nine years and was used to break into the US Treasury Department

On December 30, 2024, a 'Chinese government-sponsored advanced persistent threat actor' breached a system managing confidential data for the U.S. Treasury Department. It was discovered that the ...
SecurityWeek

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

PostgreSQL vulnerability CVE-2026-6471 allows low-privileged attackers to execute code, gain PostgreSQL superuser access and ...
CSOonline

PostgreSQL patches SQLi vulnerability likely exploited in BeyondTrust attacks

Attackers who exploited a zero-day vulnerability in BeyondTrust Privileged Remote Access and Remote Support products in December likely also exploited a previously unknown SQL injection flaw in ...
SecurityWeek

Sangoma Switchvox Vulnerability Exploited in the Wild

Hackers have been exploiting a critical-severity vulnerability (CVE-2026-9586) in the enterprise VoIP telephony management solution Sangoma Switchvox.