PostgreSQL patches 12-year-old code execution vulnerability
PostgreSQL has released security updates to fix a vulnerability present since 2014 that lets users with the REPLICATION attribute execute arbitrary code as the system user running the database. The flaw, CVE-2026-6471, affects multiple versions prior to the latest releases. The update introduces a whitelist restricting which logical decoding output plugins can be loaded, strengthening security for affected systems.
- Flaw allows code execution via REPLICATION accounts
- Vulnerability present since 2014 in multiple versions
- Affects common backup and monitoring setups
- Update adds whitelist for allowed logical decoding plugins
Sources covering this
In this story
More in Enterprise
Google Data Cloud adds new AI and analytics tools
Google just launched several new features for its Data Cloud. BigQuery now supports stateful processing in streaming queries, letting you do things like rolling averages in real time (currently in preview). There’s also a ready-to-use synthetic data generator for Managed Kafka, now generally available. And Lakehouse managed tables for Apache Iceberg are in preview, promising easier data management and cross-tool compatibility. Updates to Dataflow pipelines are also rolling out.
Salesforce details Engineering360 operational data platform
Salesforce has unveiled Engineering360, its new operational intelligence platform designed to integrate data from various sources within the company’s engineering operations. The system brings together records from code repositories, incident logs, and performance metrics, consolidating ninety billion records in real time. Salesforce says Engineering360 provides a unified, actionable view of enterprise data, seeking to enable faster decision-making for its engineering teams across its product portfolio.
Salesforce launches new Agentforce bundles with built-in AI
Salesforce just unveiled three bundled versions—Core, Advanced, and Max—of its Agentforce tools for sales, service, and industry customers. These bundles now include built-in AI, Slack, upgraded analytics, enterprise-level security, and customer support, all for a single price. The Max edition, according to Salesforce, offers 60% more value than the previous Agentforce 1, with existing customers able to upgrade at no extra charge.
Southern Company launches real-time storm operations app
Southern Company has introduced SCOUT, a real-time storm operations application built on Databricks' cloud platform. SCOUT provides live data on outages, customer impact, and restoration progress during severe weather. The system centralizes information for dispatchers, field teams, and customer service, replacing older tools and manual processes. In February, SCOUT received an industry award for improving access to outage information across Southern Company's operations.