CVE-2026-6478
Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 8.2
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- EPSS probability
- 0.56%
- CWE
- CWE-385
- Published
- 2026-05-14
- Last modified
- 2026-08-25
Affected products
- n/a PostgreSQL
- n/a PostgreSQL
- n/a PostgreSQL
- n/a PostgreSQL
- n/a PostgreSQL
Weakness type
Related vulnerabilities
- CVE-2026-84308 — phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
- CVE-2026-55785 — free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
- CVE-2026-5598 — Non-constant time comparisons risk private key leakage in FrodoKEM.
- CVE-2025-59425 — vLLM vulnerable to timing attack at bearer auth
- CVE-2025-9231 — Timing side-channel in SM2 algorithm on 64 bit ARM
- CVE-2025-59432 — Timing Attack Vulnerability in SCRAM Authentication
- CVE-2025-49087 — In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal...
- CVE-2025-53826 — FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout