CVE-2026-33816

CVE-2026-33816 is a critical memory-safety vulnerability affecting the PostgreSQL driver library github.com/pgx/v5. This flaw has a CVSS score of 9.8, indicating severe potential impact across confidentiality, integrity, and availability. The vulnerability can be exploited remotely over the network without authentication or user interaction, making it highly accessible to threat actors. Based on current indicators, there is no evidence of active exploitation in the wild, as the vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog and shows minimal community engagement on the Hot List. However, organizations should prioritize patching efforts given the critical severity rating and the ease of exploitation, regardless of current exploitation status.