DeutschShown in its original language — a full translation is planned for a future version.
Prometheus: Mehrere Schwachstellen
view advisory published 2026-04-27
Ein Angreifer kann mehrere Schwachstellen in Prometheus ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-44903US | medium6.1 | — | ||
Prometheus is an open-source monitoring system and time series database. From 2.49.0 to before 3.5.3 and 3.11.3, in the Prometheus server's legacy web UI (enabled via the command-l… | ||||
| CVE-2026-42154US | — | Exploit | ||
Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the remote read endpoint (/api/v1/read) does not validate the declared… | ||||
| CVE-2026-42151US | —OT elevated | — | ||
Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuratio… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:25245 vom 2026-06-27external
- Red Hat Security Advisory RHSA-2026:25504 vom 2026-06-28external
- Red Hat Security Advisory RHSA-2026:29770 vom 2026-06-27external
- Red Hat Security Advisory RHSA-2026:30651 vom 2026-06-28external
- Red Hat Security Advisory RHSA-2026:34364 vom 2026-07-01external
- Red Hat Security Advisory RHSA-2026:34794 vom 2026-07-14external
- Red Hat Security Advisory RHSA-2026:36796 vom 2026-07-08external
- Red Hat Security Advisory RHSA-2026:37267 vom 2026-07-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan