Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | CockroachDB PostgreSQL for IBM VPC | affected |
|
No data.
No data.
No data available yet.
Vendor Solution
For CockroachDB PostgreSQL for IBM VPC, upgrade to CockroachDB 25.2.20, 25.4.12 or 26.2.3. Download the product versions from IBM Passport Advantage Online.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7293292 |
|
Sun, 08 Nov 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is vulnerable to privilege escalation via user-defined function. | |
| Title | CockroachDB PostgreSQL for IBM VPC is affected by multiple vulnerabilities | |
| First Time appeared |
Ibm
Ibm cockroachdb Postgresql For Ibm Vpc |
|
| Weaknesses | CWE-269 | |
| CPEs | cpe:2.3:a:ibm:cockroachdb_postgresql_for_ibm_vpc:25.2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cockroachdb_postgresql_for_ibm_vpc:25.2.20:*:*:*:*:*:*:* cpe:2.3:a:ibm:cockroachdb_postgresql_for_ibm_vpc:25.4.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cockroachdb_postgresql_for_ibm_vpc:25.4.12:*:*:*:*:*:*:* cpe:2.3:a:ibm:cockroachdb_postgresql_for_ibm_vpc:26.2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:cockroachdb_postgresql_for_ibm_vpc:26.2.3:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm cockroachdb Postgresql For Ibm Vpc |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-11-08T18:08:42.430Z
Reserved: 2026-08-04T19:50:01.095Z
Link: CVE-2026-18893
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-08T19:17:38.380
Modified: 2026-11-08T19:17:38.500
Link: CVE-2026-18893
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-08T19:30:12Z
-
CWE-269
Improper Privilege Management