STIGQter: STIG Summary: Crunchy Data Postgres 16 Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

Unused database components, PostgreSQL software, and database objects must be removed.

DISA Rule

SV-261886r1000951_rule

Vulnerability Number

V-261886

Group Title

SRG-APP-000141-DB-000091

Rule Version

CD16-00-003200

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

To remove extensions, use the following commands:

$ sudo su - postgres
$ psql -c "DROP EXTENSION <extension_name>"

Note: Removal of plpgsql is not recommended.

Check Contents

To get a list of all extensions installed, use the following commands:

$ sudo su - postgres
$ psql -c "select * from pg_extension where extname != 'plpgsql'"

If any extensions exist that are not approved, this is a finding.

Vulnerability Number

V-261886

Documentable

False

Rule Version

CD16-00-003200

Severity Override Guidance

To get a list of all extensions installed, use the following commands:

$ sudo su - postgres
$ psql -c "select * from pg_extension where extname != 'plpgsql'"

If any extensions exist that are not approved, this is a finding.

Check Content Reference

M

Target Key

5598