Vendor
Postgres Exporter
Products
1
CVEs
2
Across products
2
Status
Private
Products
1- 2 CVEs
Recent CVEs
2| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-83550 | Hig | 0.46 | 7.1 | 0.00 | Oct 6, 2026 | A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially… | ||
| CVE-2026-80220 | imp | 0.35 | 5.4 | — | Aug 31, 2026 | postgres-exporter: postgres-exporter: pprof profiling endpoints exposed on unauthenticated metrics listener |
- risk 0.46cvss 7.1epss 0.00
A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially…
- risk 0.35cvss 5.4epss —
postgres-exporter: postgres-exporter: pprof profiling endpoints exposed on unauthenticated metrics listener