# CVE-2026-6478

## Summary

- **CVE ID:** CVE-2026-6478
- **Severity:** MEDIUM
- **CVSS Score:** 8.2 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
- **CWE:** CWE-385
- **Published:** May 14, 2026
- **Last Modified:** Aug 25, 2026

## Description

Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate.  This does not affect scram-sha-256 passwords, the default in all supported releases.  However, current databases may have MD5-hashed passwords originating in upgrades from PostgreSQL 13 or earlier.  Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.

## Affected Products

- n/a — PostgreSQL (18)
- n/a — PostgreSQL (17)
- n/a — PostgreSQL (16)
- n/a — PostgreSQL (15)
- n/a — PostgreSQL (0)

## References

- [CNA](https://www.postgresql.org/support/security/CVE-2026-6478/)
- [redhat-SADP](https://access.redhat.com/security/cve/CVE-2026-6478)
- [redhat-SADP](https://bugzilla.redhat.com/show_bug.cgi?id=2477447)
- [redhat-SADP](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6478.json)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:27718)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:27743)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:27742)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:27738)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28999)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28208)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26181)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28143)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29815)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:32994)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26561)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29953)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26524)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29904)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:32983)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26525)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:29212)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:28037)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26203)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:26204)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:27741)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:21182)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22878)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33441)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34043)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33497)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34362)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34363)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:35880)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42555)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:44420)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:44481)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49521)
- [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:58981)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.56%
- **EPSS Percentile:** 44.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._