CVE-2026-83550

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-83550", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2026-08-31T18:17:41.963Z", "datePublished": "2026-10-06T18:11:35.414Z", "dateUpdated": "2026-10-07T20:04:07.587Z"}, "containers": {"cna": {"title": "Postgres-exporter: net/http/pprof exposed on metrics listener", "metrics": [{"other": {"content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process arguments, full goroutine stacks, and sensitive data like database connection strings or passwords from heap dumps. Additionally, repeated CPU profiling through these endpoints can lead to a denial of service."}], "affected": [{"vendor": "Red Hat", "product": "Multicluster Global Hub", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9", "defaultStatus": "affected", "cpes": ["cpe:/a:redhat:multicluster_globalhub"]}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-83550", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526444", "name": "RHBZ#2526444", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "datePublic": "2026-10-06T16:00:00.000Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-489", "description": "Active Debug Code", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-489: Active Debug Code", "workarounds": [{"lang": "en", "value": "To mitigate this issue, restrict network access to the `postgres-exporter` service. Implement a Kubernetes `NetworkPolicy` to limit inbound connections to the `postgres-exporter` service's metrics port (9187) to only the Prometheus scraper or other trusted monitoring components within the cluster. This prevents unauthorized access to the exposed debug endpoints. Consult the OpenShift documentation for creating and applying `NetworkPolicy` resources."}], "timeline": [{"lang": "en", "time": "2026-08-31T00:00:00.000Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-10-06T16:00:00.000Z", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-10-06T18:11:35.414Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-07T20:03:10.342549Z", "id": "CVE-2026-83550", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-07T20:04:07.587Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-83550", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-07T20:03:10.342549Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-07T20:04:00.268Z"}}], "cna": {"title": "Postgres-exporter: net/http/pprof exposed on metrics listener", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"cpes": ["cpe:/a:redhat:multicluster_globalhub"], "vendor": "Red Hat", "product": "Multicluster Global Hub", "packageName": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2026-08-31T00:00:00.000Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2026-10-06T16:00:00.000Z", "value": "Made public."}], "datePublic": "2026-10-06T16:00:00.000Z", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-83550", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526444", "name": "RHBZ#2526444", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "workarounds": [{"lang": "en", "value": "To mitigate this issue, restrict network access to the `postgres-exporter` service. Implement a Kubernetes `NetworkPolicy` to limit inbound connections to the `postgres-exporter` service's metrics port (9187) to only the Prometheus scraper or other trusted monitoring components within the cluster. This prevents unauthorized access to the exposed debug endpoints. Consult the OpenShift documentation for creating and applying `NetworkPolicy` resources."}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process arguments, full goroutine stacks, and sensitive data like database connection strings or passwords from heap dumps. Additionally, repeated CPU profiling through these endpoints can lead to a denial of service."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-489", "description": "Active Debug Code"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-10-06T18:11:35.414Z"}, "x_redhatCweChain": "CWE-489: Active Debug Code"}}, "cveMetadata": {"cveId": "CVE-2026-83550", "state": "PUBLISHED", "dateUpdated": "2026-10-07T20:04:07.587Z", "dateReserved": "2026-08-31T18:17:41.963Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2026-10-06T18:11:35.414Z", "assignerShortName": "redhat"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:multicluster_globalhub"], "defaultStatus": "affected", "packageName": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9", "product": "Multicluster Global Hub", "vendor": "Red Hat"}], "source": "secalert@redhat.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process arguments, full goroutine stacks, and sensitive data like database connection strings or passwords from heap dumps. Additionally, repeated CPU profiling through these endpoints can lead to a denial of service."}], "id": "CVE-2026-83550", "lastModified": "2026-10-07T21:17:20.537", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 4.2, "source": "secalert@redhat.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-83550", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-07T20:03:10.342549Z", "version": "2.0.3"}}]}, "published": "2026-10-06T19:18:16.280", "references": [{"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2026-83550"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526444"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-489"}], "source": "secalert@redhat.com", "type": "Secondary"}]}

{"bugzilla": {"description": "postgres-exporter: net/http/pprof exposed on metrics listener", "id": "2526444", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526444"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.1", "cvss3_scoring_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "status": "draft"}, "cwe": "CWE-489", "details": ["A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within the cluster network can access these endpoints. This allows for information disclosure, potentially revealing process arguments, full goroutine stacks, and sensitive data like database connection strings or passwords from heap dumps. Additionally, repeated CPU profiling through these endpoints can lead to a denial of service."], "mitigation": {"lang": "en:us", "value": "To mitigate this issue, restrict network access to the `postgres-exporter` service. Implement a Kubernetes `NetworkPolicy` to limit inbound connections to the `postgres-exporter` service's metrics port (9187) to only the Prometheus scraper or other trusted monitoring components within the cluster. This prevents unauthorized access to the exposed debug endpoints. Consult the OpenShift documentation for creating and applying `NetworkPolicy` resources."}, "name": "CVE-2026-83550", "package_state": [{"cpe": "cpe:/a:redhat:multicluster_globalhub", "fix_state": "Fix deferred", "package_name": "multicluster-globalhub/multicluster-globalhub-postgres-exporter-rhel9", "product_name": "Multicluster Global Hub"}], "public_date": "2026-10-06T16:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-83550\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-83550"], "statement": "This vulnerability is rated as Moderate severity because exposure is confined to internal cluster network traffic and does not allow direct remote code execution or data modification. In default Multicluster Global Hub environments, the postgres-exporter service exposes profiling interfaces alongside metrics endpoints without network-level isolation or authentication. Although adjacent pods on the cluster network can trigger resource exhaustion through repeated CPU profiling or inspect memory dumps for connection details, exploitation requires existing presence within the private cluster network.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Multicluster Global Hub", "source": "cna", "vendor": "Red Hat"}, "product": "postgres-exporter", "vendor": "postgres-exporter"}], "created": "2026-10-06T20:15:05.843077+00:00", "updated": "2026-10-07T06:00:08.250123+00:00", "vendors": ["postgres-exporter", "postgres-exporter$PRODUCT$postgres-exporter"]}