Known vulnerabilities in Pgpool-II

Software: Pgpool-II
Software CPE: cpe:2.3:a:pgpool_global_development_group:pgpool-ii:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Pgpool-II Pgpool-II is affected by 9 known vulnerabilities: 1 high, 8 medium Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152786 - Incorrect Implementation of Authentication Algorithm
CVE-2026-92873
CWE-303 Medium
No
No
4.3.21, 4.4.18, 4.5.13, 4.6.8, 4.7.3 29.09.2026 SB2026092946
#VU152785 - Information Exposure Through Log Files
CVE-2026-92872
CWE-532 Medium
No
No
4.3.21, 4.4.18, 4.5.13, 4.6.8, 4.7.3 29.09.2026 SB2026092946
#VU152784 - NULL Pointer Dereference
CVE-2026-92871
CWE-476 Medium
No
No
4.3.21, 4.4.18, 4.5.13, 4.6.8, 4.7.3 29.09.2026 SB2026092946
#VU152776 - Stack-based buffer overflow
CVE-2026-92870
CWE-121 Medium
No
No
4.3.21, 4.4.18, 4.5.13, 4.6.8, 4.7.3 29.09.2026 SB2026092946
#VU152775 - Out-of-bounds write
CVE-2026-92869
CWE-787 Medium
No
No
4.3.21, 4.4.18, 4.5.13, 4.6.8, 4.7.3 29.09.2026 SB2026092946
#VU152774 - Out-of-bounds write
CVE-2026-92867
CWE-787 Medium
No
No
4.3.21, 4.4.18, 4.5.13, 4.6.8, 4.7.3 29.09.2026 SB2026092946
#VU152773 - Improper Certificate Validation
CVE-2026-92868
CWE-295 Medium
No
No
4.3.21, 4.4.18, 4.5.13, 4.6.8, 4.7.3 29.09.2026 SB2026092946
#VU109827 - Authentication Bypass by Primary Weakness
CVE-2025-46801
CWE-305 High
No
No
4.2.22, 4.3.15, 4.4.12, 4.5.7, 4.6.1 27.05.2025 SB2025052710
#VU71415 - Exposure of sensitive information to an unauthorized actor
CVE-2023-22332
CWE-200 Medium
No
No
4.0.22, 4.1.15, 4.2.12, 4.3.5, 4.4.2 23.01.2023 SB2023012303