'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

RULE(RULE ID:717305)

Rule General Information
Release Date: 2026-10-10
Rule Name: PostgreSQL to_char Timezone Abbreviation Heap Buffer Overflow Vulnerability (CVE-2026-14669)
Severity:
CVE ID:
Rule Protection Details
Description: PostgreSQL is a free and open-source object-relational database management system developed by the PostgreSQL organization. It supports most SQL standards and provides many other features, such as foreign keys, triggers, views, etc. PostgreSQL versions prior to 18.5, prior to 17.11, prior to 16.15, prior to 15.19, and prior to 14.24 contain a buffer overflow vulnerability. This vulnerability arises from a heap buffer overflow when to_char(timestamptz) processes long POSIX time zone abbreviations, which may allow the party selecting the time zone to execute arbitrary code as the operating system user running the database.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows, Linux, Others
Reference: https://www.postgresql.org/support/security/CVE-2026-14669/
Solutions
Refer to the announcement or patch by the vendor.