Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-32286

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.9%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-32286
  • Jackc » Pgproto3 » Version: 2.0.0
    cpe:2.3:a:jackc:pgproto3:2.0.0
  • Jackc » Pgproto3 » Version: 2.0.1
    cpe:2.3:a:jackc:pgproto3:2.0.1
  • Jackc » Pgproto3 » Version: 2.0.2
    cpe:2.3:a:jackc:pgproto3:2.0.2
  • Jackc » Pgproto3 » Version: 2.0.3
    cpe:2.3:a:jackc:pgproto3:2.0.3
  • Jackc » Pgproto3 » Version: 2.0.4
    cpe:2.3:a:jackc:pgproto3:2.0.4
  • Jackc » Pgproto3 » Version: 2.0.5
    cpe:2.3:a:jackc:pgproto3:2.0.5
  • Jackc » Pgproto3 » Version: 2.0.6
    cpe:2.3:a:jackc:pgproto3:2.0.6
  • Jackc » Pgproto3 » Version: 2.0.7
    cpe:2.3:a:jackc:pgproto3:2.0.7
  • Jackc » Pgproto3 » Version: 2.1.0
    cpe:2.3:a:jackc:pgproto3:2.1.0
  • Jackc » Pgproto3 » Version: 2.1.1
    cpe:2.3:a:jackc:pgproto3:2.1.1
  • Jackc » Pgproto3 » Version: 2.2.0
    cpe:2.3:a:jackc:pgproto3:2.2.0
  • Jackc » Pgproto3 » Version: 2.3.0
    cpe:2.3:a:jackc:pgproto3:2.3.0
  • Jackc » Pgproto3 » Version: 2.3.1
    cpe:2.3:a:jackc:pgproto3:2.3.1
  • Jackc » Pgproto3 » Version: 2.3.2
    cpe:2.3:a:jackc:pgproto3:2.3.2
  • Jackc » Pgproto3 » Version: 2.3.3
    cpe:2.3:a:jackc:pgproto3:2.3.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved