pgedge

Records7

1. closed3.1
   MCP servers & tools CVE-2026-126198: pgEdge Postgres MCP Server bypasses write confirmation for custom tools

   Patch now · Disclosed · ●Patched · since 12 Nov 2026 · CVE-2026-126198

   AI
2. closed8.1
   MCP servers & tools CVE-2026-126196: pgEdge Postgres MCP Server permits multi‑statement writes on read‑only connections

   Patch now · Disclosed · ●Patched · since 12 Nov 2026 · CVE-2026-126196

   AI
3. closed8.8
   MCP servers & tools CVE-2026-126197: pgEdge Postgres MCP Server vulnerable to JSON‑based SQL injection

   Patch now · Disclosed · ●Patched · since 12 Nov 2026 · CVE-2026-126197

   AI
4. closed6.8
   MCP servers & tools CVE-2026-126199: pgEdge Postgres MCP Server allows SQL queries without write confirmation

   Patch now · Disclosed · ●Patched · since 12 Nov 2026 · CVE-2026-126199

   AI
5. closed6.5
   MCP servers & tools CVE-2026-125321: pgEdge Postgres MCP Server rate‑limit bypass via X‑Forwarded‑For

   Patch now · Disclosed · ●Patched · since 10 Nov 2026 · CVE-2026-125321

   AI
6. closed5.3
   MCP servers & tools CVE-2026-125320: pgEdge Postgres MCP Server vulnerable to DNS rebinding via Origin header

   Patch now · Disclosed · ●Patched · since 10 Nov 2026 · CVE-2026-125320

   AI
7. closed6.5
   MCP servers & tools CVE-2026-125322: pgEdge Postgres MCP Server allows subquery inference via count_rows tool

   Patch now · Disclosed · ●Patched · since 10 Nov 2026 · CVE-2026-125322

   AI