CVE-2026-2004 | PostgreSQL up to 14.20/15.15/16.11/17.7/18.1 intarray Extension improper validation of specified type of input

A vulnerability described as critical has been identified in PostgreSQL up to 14.20/15.15/16.11/17.7/18.1. The impacted element is an unknown function of the component intarray Extension. Such manipulation leads to improper validation of specified type of input.

This vulnerability is referenced as CVE-2026-2004. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.