CVE-2026-33815

CVE-2026-33815 is a critical memory-safety vulnerability affecting github.com/jackc/pgx/v5, a widely-used PostgreSQL driver library. The vulnerability carries a CVSS score of 9.8, indicating severe risk with high potential for compromise. The attack vector is network-based with low complexity, requiring no privileges or user interaction, making it relatively straightforward to exploit remotely. The vulnerability poses significant threats across all three security dimensions: confidentiality, integrity, and availability. An attacker exploiting this flaw could potentially execute arbitrary code, exfiltrate sensitive data, or disrupt system availability. At present, there is no evidence of active exploitation in the wild, as the vulnerability does not appear on the KEV catalog and has inactive status on threat tracking lists. The EPSS score of 0.000560 suggests current real-world exploitation probability is low, though the community attention and risk score of 55.0 indicate this remains a serious concern requiring prompt patching.