VYPR

pg_basebackup

by PostgreSQL

CVEs (1)

  • CVE-2026-16240LowNov 12, 2026
    risk 0.24cvss 3.7epss —

    Use of externally-controlled format string in PostgreSQL pg_basebackup allows an attacker having already compromised a server to achieve disclosure from pg_basebackup memory, via backup manifest bytes. The vulnerability does not return the improperly-read bytes back to the…