VULNERABILITY INTELLIGENCE
CVE-2025-46801
CVSS score9.8 CRITICAL
EPSS probability0.91%
CISA KEVNot currently listed
Published2025-05-19
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.
Weakness classification
- vultures@jpcert.or.jp: CWE-305