- CVE-2026-2003: reject oidvector and int2vector values that are not one-dimensional or contain nulls (server memory disclosure) - CVE-2026-18024: ascii(): check the remaining length and the byte values of a multibyte character (buffer over-read) - CVE-2026-14678: pg_trgm: GiST picksplit no longer reads a cached signature as a trigram array (buffer over-read) - CVE-2026-14663: pgcrypto: fail PGP encryption and decryption when the cipher cannot be initialized, instead of leaving the data in cleartext (new option ignore-cipher-failure restores the old decryption behaviour) - CVE-2026-6470: check USAGE privilege on the subtype of a range type, on types used by stored expressions and on the composite type in ALTER TABLE OF