CVE-2026-4427
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Mar 19, 2026
Vendor
unknown
Description
A flaw was found in pgproto3. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message with a negative field length. This input validation vulnerability can lead to a denial of service (DoS) due to a slice bounds out of range panic.