CVE-2026-80220

{}

{}

{}

{"bugzilla": {"description": "postgres-exporter: postgres-exporter: pprof profiling endpoints exposed on unauthenticated metrics listener", "id": "2518396", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518396"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.4", "cvss3_scoring_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "status": "draft"}, "cwe": "CWE-200", "details": ["No description is available for this CVE."], "name": "CVE-2026-80220", "package_state": [{"cpe": "cpe:/a:redhat:multicluster_globalhub", "fix_state": "Affected", "impact": "important", "package_name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9", "product_name": "Multicluster Global Hub"}], "public_date": "2026-08-31T13:48:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-80220\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-80220"], "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 75.0, "confidence_source": "inferred", "scores": [{"score": 75.0, "source": "inferred"}]}, "product": "postgres-exporter", "vendor": "postgres-exporter"}], "created": "2026-09-01T14:30:18.131768+00:00", "updated": "2026-10-04T20:48:15.996138+00:00", "vendors": ["postgres-exporter", "postgres-exporter$PRODUCT$postgres-exporter"]}