CVE-2026-110183
Medium · 4.3CVSS
4.3
EPSS
0.2%
Published
Oct 28, 2026
CISA due date
—
The record
PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible in pg_stats until an ANALYZE operation is performed on the table, either manually or by autovacuum. This issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118544 Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce… CWE-202
- CVE-2026-105615 PostgreSQL's optimized statistics on a table are visible as long as you have SELECT… CWE-202
- CVE-2026-100420 A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63… CWE-202
- CVE-2026-16520 Improper input validation and Exposure of sensitive information through data queries… CWE-202
- CVE-2026-25703 NeuVector through 5.4.9 is can potentially leak information from manager /network/graph… CWE-202
- CVE-2026-70473 Flowise is a drag-and-drop user interface for building customized large language model… CWE-202
- CVE-2026-42797 Exposure of Sensitive Information Through Data Queries vulnerability in Apache Syncope. CWE-202
- CVE-2026-40245 Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core… CWE-202