Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Apache Log4j 2 Unauthenticated Remote Code Execution

MINI-2vpf-fp8g-v767
Summary

Apache Log4j 2 is a popular logging library used in many Java applications. If exploited, an attacker could run unauthorized code on a vulnerable server, potentially leading to data theft, system compromise, or even a full-scale attack. To protect your system, update to the latest version of Apache Log4j 2 as soon as possible.

What to do
  • Update prometheus-postgres-exporter to version 0.19.1-r2.
  • Update prometheus-postgres-exporter-advanced-compat to version 0.19.1-r2.
Affected software
VendorProductAffected versionsFix available
prometheus-postgres-exporter <= 0.19.1-r2 0.19.1-r2
prometheus-postgres-exporter-advanced-compat <= 0.19.1-r2 0.19.1-r2
Original title
MINI-2vpf-fp8g-v767
Published: 12 Apr 2026 · Updated: 12 Apr 2026 · First seen: 12 Apr 2026