Lucene search
+L

115 matches found

NVD
NVD
added 2026/08/27 8:18 p.m.7 views

CVE-2026-75889

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...

7.7CVSS0.00219EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/27 5:22 p.m.34 views

CVE-2026-75889 CVE-2026-75889 CVE Record

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...

7.7CVSS0.00219EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 5:22 p.m.39 views

CVE-2026-75889

Grafana Alloy's prometheus.operator.servicemonitors component is vulnerable to arbitrary local file disclosure via the bearerTokenFile field. A user with ServiceMonitor write access in a watched namespace can point this field at any file readable by the Alloy process; Alloy then sends the file's ...

7.7CVSS5.5AI score0.00219EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 5:22 p.m.7 views

EUVD-2026-67162

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...

7.7CVSS5.5AI score0.00219EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/27 5:22 p.m.12 views

CVE-2026-75889 CVE-2026-75889 CVE Record

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file through bearerTokenFile. Alloy reads the file and sends its contents as a bearer token to an attacker-controlled...

7.7CVSS5.9AI score0.00219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.13 views

PT-2026-82731

Name of the Vulnerable Software and Affected Versions Grafana Alloy affected versions not specified Description The prometheus.operator.servicemonitors component allows a user with permissions to create or modify ServiceMonitor resources in a watched namespace to specify an arbitrary local file...

7.7CVSS6AI score0.00219EPSS
SaveExploits0References5
Chainguard
Chainguard
added 2026/08/14 8:25 a.m.25 views

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: grafana-alloy, splunk-otel-collector, sqlexporter-fips, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, splunk-otel-collector-fips, sqlexporter, grafana-alloy-fips, vault...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:25 a.m.21 views

GO-2024-3066 vulnerabilities

Vulnerabilities for packages: grafana-alloy, grafana-alloy-fips...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.14 views

GO-2026-5115 vulnerabilities

Vulnerabilities for packages: grafana-alloy, grafana, grafana-fips, grafana-alloy-fips, commercial-grafana...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.25 views

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: neuvector-scanner-fips, grafana-alloy-fips, gosu, grype, kubernetes, podman, neuvector, cluster-autoscaler-fips, kubernetes-fips, opentelemetry-collector-contrib, eks-distro-fips, cadvisor, cluster-autoscaler, syft, neuvector-scanner, neuvector-fips, eks-distro,...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.19 views

GO-2026-4518 vulnerabilities

Vulnerabilities for packages: grafana-alloy, teleport, steampipe, splunk-otel-collector, telegraf, bento, bento-fips, splunk-otel-collector-fips, grafana-alloy-fips, kots...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/14 8:24 a.m.19 views

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, amazon-cloudwatch-agent-fips, splunk-otel-collector-fips, grafana-alloy-fips, argo-cd, kargo, argo-cd-fips, argo-rollouts-fips, opentelemetry-collector-contrib, opentelemetry-collector, argo-workflows-fips, eks-distro-fips, k8sgpt, eks-distro...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:24 a.m.17 views

GO-2024-3066 vulnerabilities

Vulnerabilities for packages: grafana-alloy...

5.3AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:24 a.m.15 views

GO-2025-3650 vulnerabilities

Vulnerabilities for packages: sqlexporter, splunk-otel-collector, opentelemetry-collector-contrib, grafana-alloy...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:24 a.m.15 views

GO-2026-5115 vulnerabilities

Vulnerabilities for packages: grafana, grafana-alloy...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:24 a.m.15 views

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: filebrowser, nsc, vcluster, terragrunt, nuclei, gptscript, grafana-alloy, podman, trivy, zot, rancher-fleet, gitleaks, xeol, kubescape-operator, envoy-gateway, opentofu, terraform, zarf, steampipe, trufflehog, tflint, k9s, trivy-operator, guac, undock, gitness...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.34 views

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: kubevela, witness, eksctl, weaviate, vcluster, terragrunt, k3s, terraform-mcp-server, nuclei, rclone, k8sgpt, grafana-alloy, opentelemetry-collector, malcontent, prometheus, dgraph, goreleaser, lazygit, ollama, dagger, maru, grafana, gitlab-runner, cri-tools, nfpm,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.21 views

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: falco-no-driver, kubernetes, nvidia-container-toolkit, podman, buildah, sriov-network-device-plugin, k3s, node-feature-discovery, grafana-alloy...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.15 views

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: falco-no-driver, kubernetes, nvidia-container-toolkit, podman, buildah, sriov-network-device-plugin, k3s, node-feature-discovery, grafana-alloy...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.16 views

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: cadvisor, kubernetes, podman, runc, buildah, ctop, k8s-device-plugin, neuvector-scanner, syft, grype, k3s, opentelemetry-collector-contrib, docker, grafana-alloy...

5.9AI score
SaveExploits0
Rows per page
Query Builder