PostgreSQL Replication Account Escalated to Superuser (CVE-2026-6471)
Detects instances where a database role initially possessing only REPLICATION privileges is elevated to a SUPERUSER role, which represents a significant escalation of privilege within a PostgreSQL environment.
Microsoft Sentinel (KQL)

