CVE-2026-6664

HIGH LAB

PgBouncer integer overflow in PgBouncer network packet parsing

Title source: cna
STIX 2.1

Description

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.

Exploits (1)

github WORKING POC
by nicolasjulian · pythonpoc
https://github.com/nicolasjulian/bouncer-overflow

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0005
EPSS Percentile 14.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Lab Environment

COMMUNITY
Community Lab
docker pull postgres:16

Details

CWE
CWE-190
Status published
Products (2)
None/PgBouncer < 1.25.2
pgbouncer/pgbouncer < 1.25.2
Published May 09, 2026
Tracked Since May 09, 2026