CVE-2026-16240

The PostgreSQL pg_basebackup utility is vulnerable to a format string vulnerability (CWE-134) where externally-controlled backup manifest bytes can be interpreted as a format string. An attacker who has already compromised a server can exploit this to achieve memory disclosure from pg_basebackup....