CVE-2026-92873CWE-303

CVE-2026-92873

High · published September 30, 2026

CVSS v3.0
7.3
EPSS
0%
Percentile
23.1
In the wild
Unconfirmed
What it is

Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.

The record
Technical detail
CVSS v3.0
7.3 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00314 · 23.1th percentile
Weakness
CWE-303 · Incorrect Implementation of Authentication Algorithm
Published
2026-09-30T12:16Z
References (2)
https://jvn.jp/en/jp/JVN22475874/ · [email protected]https://pgpool.net/news/2026-09-29/ · [email protected]
EPSS history
Timeline
  • 01 OCT 03:50Z
    EPSS moved — → 0%
    epss
  • 30 SEP 07:51Z
    Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog…
    cvelistv5