CVE-2026-92873: Pgpool Global Development Group Pgpool-Ii

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Pgpool-II contains an incorrect implementation of an authentication algorithm, which may allow an unauthenticated attacker to promote an arbitrary watchdog node to the leader node.

Affected products

• Pgpool Global Development Group Pgpool-Ii: from 4.7.0, up to and including 4.7.2; from 4.6.0, up to and including 4.6.7; from 4.5.0, up to and including 4.5.12; from 4.4.0, up to and including 4.4.17; from 4.3.0, up to and including 4.3.20; from 3.5, before 4.3 (fixed in 4.3)

Published 2026-09-30. Last modified 2026-09-30.