Is CVE-2026-2003 in the CISA KEV catalog?

No. CVE-2026-2003 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2026-2003?

CVE-2026-2003 has a CVSS v3 base score of 4.3 (MEDIUM).

What is the EPSS score for CVE-2026-2003?

CVE-2026-2003 has an EPSS score of 0.28% (20th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2026-2003?

Upgrade postgresql-13 on debian 11 to 13.23-0+deb11u2 or later. Fixes are available for 173 affected products.

CVE & CISA-KEV Catalog

CVE-2026-2003

MEDIUM

4.3

CVSS v3

NVD

Description

Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that arrange for presence of confidential information in disclosed bytes, but they seem unlikely. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.

CWE-1287Improper Validation of Specified Type of Input

How to fix

Remediation Available

postgresql-13Debian

Fixed in:13.23-0+deb11u2CVE-2026-2003

pg_repackRocky

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15RHSA-2026:4254

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.s390x::postgresql:16RHSA-2026:4547

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.src::postgresql:15RHSA-2026:4548

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.aarch64::postgresql:15RHSA-2026:3896

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.src::postgresql:15RHSA-2026:3896

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.aarch64::postgresql:15RHSA-2026:4546

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.x86_64::postgresql:16RHSA-2026:4063

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15RHSA-2026:4548

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.ppc64le::postgresql:15RHSA-2026:4059

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.aarch64::postgresql:16RHSA-2026:4547

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.x86_64::postgresql:16RHSA-2026:4110

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.src::postgresql:16RHSA-2026:4110

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.s390x::postgresql:16RHSA-2026:4544

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.x86_64::postgresql:15RHSA-2026:4254

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.x86_64::postgresql:16RHSA-2026:4544

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.x86_64::postgresql:15RHSA-2026:4546

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15RHSA-2026:4254

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.x86_64::postgresql:15RHSA-2026:4515

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.src::postgresql:16RHSA-2026:4547

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.ppc64le::postgresql:16RHSA-2026:4110

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.s390x::postgresql:16RHSA-2026:4063

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.x86_64::postgresql:15RHSA-2026:4548

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.x86_64::postgresql:16RHSA-2026:4547

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.aarch64::postgresql:16RHSA-2026:4110

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.s390x::postgresql:16RHSA-2026:4110

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.aarch64::postgresql:15RHSA-2026:4059

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.ppc64le::postgresql:15RHSA-2026:4546

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.src::postgresql:15RHSA-2026:4059

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.ppc64le::postgresql:15RHSA-2026:4515

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.src::postgresql:16RHSA-2026:4063

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.ppc64le::postgresql:16RHSA-2026:4544

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15RHSA-2026:4548

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.src::postgresql:15RHSA-2026:4546

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15RHSA-2026:4548

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.src::postgresql:15RHSA-2026:4515

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.ppc64le::postgresql:16RHSA-2026:4063

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.s390x::postgresql:15RHSA-2026:3896

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x::postgresql:15RHSA-2026:4059

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.s390x::postgresql:15RHSA-2026:4546

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.x86_64::postgresql:15RHSA-2026:4059

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.aarch64::postgresql:16RHSA-2026:4063

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.src::postgresql:15RHSA-2026:4254

Fixed in:0:1.5.1-1.module+el9.6.0+22880+6b241eec.ppc64le::postgresql:16RHSA-2026:4547

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.aarch64::postgresql:16RHSA-2026:4544

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.src::postgresql:16RHSA-2026:4544

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15RHSA-2026:4254

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.x86_64::postgresql:15RHSA-2026:3896

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.ppc64le::postgresql:15RHSA-2026:3896

pg_repackRed Hat / RHEL