C21/100
Vulnerability · medium
Exploit for 22-year-old PostgreSQL composite-type vulnerability
Tier C · Keep an eye on it – Check if you’re affected
Who’s exposed: PostgreSQL installations; affected versions not stated in source
Tier C because: Hits tech teams
Reach
Attack
Damage
Fix
Popular tool
The Brief
- A public exploit has been posted for a PostgreSQL composite-type vulnerability.
- The vulnerability is described in the post title as being 22 years old.
- The only source is a Reddit r/programming link dated 2026-11-12 with no summary.
Why it matters
Developers running PostgreSQL should check whether their versions are affected and whether a fix is available, since a public exploit now exists. The source does not give affected versions or patch status.
The checklist behind the tier
Checklist · 2 of 10 yes
| Yes | Hits tech teams | PostgreSQL is a database developers and ops teams build with and run. |
| No | Core infrastructure | PostgreSQL is widely used but is not foundational like OpenSSH, the Linux kernel or OpenSSL. |
| Yes | Popular tool | PostgreSQL is a mainstream, widely deployed database used by many teams. |
| No | Exploited in the wild | Reddit r/programming post title only; no source reports observed attacks. |
| No | Public exploit | Reddit title says 'exploit a 22 years old...' but no summary; no source says exploit code is published. |
| No | Remote, no login | No source describes the attack conditions or required access. |
| No | Full takeover | No source states the vulnerability leads to code execution or privilege escalation. |
| No | Secrets exposed | No source reports stolen credentials, data or configs. |
| No | Supply chain | No source reports compromised packages, updates or build pipelines. |
| No | No fix yet | No source says a patch is missing or unavailable. |
Timeline
Source
exploit a 22 years old PostgreSQL composite-type vulnerability ↗ top scoring links : programming · 2h ago
First seen · 1 source · Full story page · How tiers are decided