Mon, Nov 9 brief Vulnerabilities and patches
Aurora PostgreSQL Babelfish flaw may let attackers run commands without a login
It affects clusters with Babelfish turned on, which accepts SQL Server connections on the TDS port, and AWS lists a fixed Aurora PostgreSQL version for each release.
Further readingAWS advisory 2026-166-AWS, further reading on Aurora PostgreSQL Babelfish flaw may let attackers run commands without a login, Mon, Nov 9 Babelfish for PostgreSQL advisory GHSA-vq28-vgj3-r26w, further reading on Aurora PostgreSQL Babelfish flaw may let attackers run commands without a login, Mon, Nov 9