CVE-2026-83550
7.1 HIGHPublished 2026-10-06 · Updated 2026-10-07
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process arguments, full goroutine stacks, and sensitive data like database connection strings or passwords from heap dumps. Additionally, repeated CPU profiling through these endpoints can lead to a denial of service.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weaknesses
CWE-489
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- UNSCOREDCVE-2026-100102
- MEDIUMCVE-2026-100295
- CRITICALCVE-2026-102628
- CRITICALCVE-2026-103475PoC
- UNSCOREDCVE-2026-13313
- MEDIUMCVE-2026-15575
- UNSCOREDCVE-2026-50228
- LOWCVE-2026-73593
Related by shared AI tags and CWE weakness class. Browse the full archive.