Exploitation Summary
EIP tracks 4 public exploits for CVE-2026-2005. PoCs published by Hex0rc1st, XZ1r0, var77.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2026-2005, a heap-based buffer overflow in PostgreSQL's pgcrypto extension. The exploit demonstrates arbitrary memory read/write and privilege escalation to superuser via crafted PGP session key parsing.
Description
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
Exploits (4)
This repository contains a functional exploit for CVE-2026-2005, a heap-based buffer overflow in PostgreSQL's pgcrypto extension. The exploit demonstrates arbitrary memory read/write and privilege escalation to superuser via crafted PGP session key parsing.
This repository contains a functional exploit for CVE-2026-2005, a heap-based buffer overflow in PostgreSQL's pgcrypto extension. The exploit demonstrates privilege escalation to superuser via a crafted PGP session key, leveraging arbitrary read/write primitives to overwrite CurrentUserId.
This repository provides a detailed technical analysis and lab setup for CVE-2026-2005, a heap buffer overflow in PostgreSQL's pgcrypto extension. It includes a Docker-based lab environment for practicing exploitation, with clear objectives and background on the vulnerability.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H