CVE-2026-104055

Publié : 2 octobre 2026

Modifié : 3 octobre 2026

Description détaillée

The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover the password, which grants read-only pg_monitor access to PostgreSQL. This is fixed in the dev track (14/edge) in revisions 1189 (arm64) and 1190 (amd64), and in the stable track (14/stable) in revisions 1216 (arm64) and 1217 (amd64).

Références et Patchs

https://github.com/canonical/charmed-postgresql-snap/pull/305 https://github.com/canonical/charmed-postgresql-snap/pull/307 https://github.com/canonical/postgresql-operator/pull/1863 https://github.com/canonical/postgresql-operator/security/advisories/GHSA-rcx7-7rh5-r542

Dernières Vulnérabilités

CVE-2026-96451

Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.13.1.

VOIR DÉTAILS

CVE-2026-103342

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Reflected XSS.This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.20.

VOIR DÉTAILS

CVE-2026-103065

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1.

VOIR DÉTAILS