PgPool Global Development Group vulnerabilities
We track 4 vulnerabilities in PgPool Global Development Group products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
Latest PgPool Global Development Group vulnerabilities
- 8.7 High severity
Pgpool-II: NULL Pointer Dereference
A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process.
- 8.7 High severity
Pgpool-II: Out-of-bounds Write
An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution.
- 9.3 Critical severity
Pgpool-II: Authentication Bypass by Primary Weakness
Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper
- 7.5 High severity
Pgpool-II: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved.