Forkast News

Postgres MCP Pro’s Safe Mode Was Supposed to Block Dangerous SQL. A Parser Flaw Bypasses It Entirely.

A SQL parsing flaw in Postgres MCP Pro lets AI agents bypass restricted mode and read arbitrary files from the database ...
Forkast News

Postgres MCP Pro Restricted-Mode Bypass Exposes the Gap in AI Database Security

A critical vulnerability in a popular Model Context Protocol server shows that application-layer safety controls cannot ...
SecurityWeek

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

PostgreSQL vulnerability CVE-2026-6471 allows low-privileged attackers to execute code, gain PostgreSQL superuser access and ...
Security Affairs

PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover

PostGREShell (CVE-2026-6471) is a 12-year-old PostgreSQL flaw that lets low-privileged attackers execute code and take over ...
Security Affairs

U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog.