{"items":[{"id":"CVE-2026-55769","published":"2026-08-20T21:41:51.369Z","updated":"2026-08-21T11:20:22.436Z","title":"CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`","severity":"CRITICAL","score":9.4,"vendor":"cloudnative-pg","product":"cloudnative-pg","kev":false,"epss":0.00771,"kevAdded":null},{"id":"CVE-2026-55765","published":"2026-08-20T21:38:47.952Z","updated":"2026-08-25T15:29:20.264Z","title":"CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant  roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod","severity":"HIGH","score":8.5,"vendor":"cloudnative-pg","product":"cloudnative-pg","kev":false,"epss":0.005,"kevAdded":null},{"id":"CVE-2026-44477","published":"2026-05-28T15:46:12.241Z","updated":"2026-07-15T00:54:01.418Z","title":"CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE","severity":"CRITICAL","score":9.4,"vendor":"cloudnative-pg","product":"cloudnative-pg","kev":false,"epss":0.0048,"kevAdded":null}]}