← CVE Intelligence

CVE-2026-92873

Pgpool Global Development Group / Pgpool-II PUBLISHED

Description (CNA)

Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.

Affected (CNA)

Vendor / productVersions
Pgpool Global Development Group / Pgpool-IIaffected 4.7.0 through 4.7.2; affected 4.6.0 through 4.6.7; affected 4.5.0 through 4.5.12; affected 4.4.0 through 4.4.17; affected 4.3.0 through 4.3.20; affected 3.5.x through 4.2.x

CWE

CWE-303

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.