# PostgreSQL psqlODBC DoS flaw patched

Published: 2026-10-15 · Severity: routine
Canonical: https://vorant.io/reports/7bdf303b-7b63-5715-88a2-4befeeea91b3/postgresql-psqlodbc-dos-flaw-patched

> CERT-FR warns a remote denial-of-service vulnerability in PostgreSQL psqlODBC before 18.00.0005 requires patching.

CERT-FR issued an advisory regarding CVE-2026-109448, a vulnerability affecting the PostgreSQL psqlODBC driver in versions prior to 18.00.0005. The flaw allows a remote attacker to trigger a denial-of-service condition, potentially disrupting database connectivity for affected systems. No details of active exploitation in the wild are mentioned in the advisory.

Administrators using psqlODBC should upgrade to version 18.00.0005 or later as referenced in the official PostgreSQL security bulletin. This is a standard patch advisory with no indication of in-the-wild exploitation or additional attacker tradecraft beyond the denial-of-service impact.

## Mentioned in this report

- Vulnerabilities: CVE-2026-109448

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1319

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/7bdf303b-7b63-5715-88a2-4befeeea91b3/postgresql-psqlodbc-dos-flaw-patched.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup