A vulnerability has been found in PostgreSQL up to 16.13/17.9/18.3 and classified as critical. This affects an unknown function of the component Subscription Handler. This manipulation causes sql injection.
This vulnerability is tracked as CVE-2026-6638. The attack is possible to be carried out remotely. No exploit exists.
The affected component should be upgraded.
