PostgreSQL releases fix 52 security vulnerabilities

Tier C · Keep an eye on it – Check if you’re affected

Who’s exposed: PostgreSQL 14–18 servers not yet updated to November 2026 releases

Tier C because: Hits tech teams

Reach

Attack

Damage

Fix

Popular tool

What to do

Update PostgreSQL to 18.7, 17.12, 16.16, 15.20 or 14.25, matching your major version.
If you use PGDG RPM repositories, update PostgreSQL and all installed extensions in the same transaction rather than updating the server alone.

The Brief

PostgreSQL released 18.7, 17.12, 16.16, 15.20 and 14.25 on 2026-11-12, fixing 52 newly disclosed security vulnerabilities.
The releases also include more than 140 bug fixes, according to Phoronix.
PostgreSQL 19 RC2 was released the same day.

Why it matters

Developers running PostgreSQL 14 through 18 should apply the minor release for their major version, since the update fixes 52 security vulnerabilities.

The checklist behind the tier

Checklist · 2 of 10 yes

Yes	Hits tech teams	PostgreSQL is a database server that developers and ops teams run and maintain.
No	Core infrastructure	PostgreSQL is widely used but is not in the core infrastructure list like OpenSSH, glibc or Kubernetes.
Yes	Popular tool	PostgreSQL is a mainstream, widely used database platform across many teams.
No	Exploited in the wild	Phoronix and Planet PostgreSQL only report disclosed vulnerabilities and releases; no observed attacks mentioned.
No	Public exploit	Phoronix and Planet PostgreSQL mention no published exploit code or proof-of-concept.
No	Remote, no login	Phoronix and Planet PostgreSQL do not state that any flaw is remotely exploitable without credentials.
No	Full takeover	Phoronix and Planet PostgreSQL do not describe code execution or privilege escalation impacts.
No	Secrets exposed	Phoronix and Planet PostgreSQL report no stolen credentials, data or source code.
No	Supply chain	Phoronix and Planet PostgreSQL describe ordinary security fixes, not compromised packages or build pipelines.
No	No fix yet	Planet PostgreSQL says fixed releases 18.7, 17.12, 16.16, 15.20 and 14.25 are out today.

Timeline

Nov 12
PostgreSQL minor releases fixing 52 security vulnerabilities published
Nov 12 · 12:58 PM
Planet PostgreSQL
Devrim GÜNDÜZ: PostgreSQL November 2026 minor releases: update the server and extensions together
Nov 12 · 3:56 PM
Phoronix
PostgreSQL Sees New Releases For 52 Security Vulnerabilities, 140+ Bug Fixes

Full coverage · 2 sources

First seen 5h ago · 2 sources · Full story page · How tiers are decided