PT-2026-85902

Package prometheus-node-exporter-fips version 1.6.1-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37...

PT-2026-86039

Package prometheus-nats-exporter version 0.16.0-r0 fixes 1 vulnerabilities: ghsa-fhg8-qxh5-7q3w...

PT-2026-86034

Package prometheus-node-exporter-fips version 1.7.0-r0 fixes 2 vulnerabilities: ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37...

PT-2026-86029

Package prometheus-mongodb-exporter version 0.47.2-r0 fixes 2 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv...

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5

CVE-2026-56852 affecting package prometheus-node-exporter for versions less than 1.7.0-5. A patched version of the package is available...

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7

CVE-2026-56852 affecting package prometheus-adapter for versions less than 0.12.0-7. A patched version of the package is available...

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5

CVE-2026-56852 affecting package prometheus-process-exporter for versions less than 0.8.2-5. A patched version of the package is available...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: omnictl-multiarch, cilium, snyk-cli, k3d, containerd, kaf, aactl, upwind-agent, commercial-grafana, falco-no-driver, backup-restore-operator, zitadel, omnictl-multiarch-fips, loki, terraform, telegraf, elastic-agent-fips, zot, helm, minio, prometheus-mongodb-exporter...

Prometheus flags API endpoint Detection

The flags endpoint provides a full path to the configuration file. If the file is stored in the home directory, it may leak a username. !/usr/bin/env python3 -- coding: utf-8 -- """The flags endpoint provides a full path to the configuration file.""" from kittysploit import from...

Prometheus Panel - Detect

Prometheus panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Prometheus Panel - Detect', 'description': 'Prometheus panel...

Prometheus - Open Redirect Detection

Prometheus 2.23.0 through 2.26.0 and 2.27.0 contains an open redirect vulnerability. To ensure a seamless transition to 2.27.0, the default UI was changed to the new UI with a URL prefixed by /new redirect to /. Due to a bug in the code, an attacker can redirect a user to a malicious site and...

Prometheus Monitoring System - Unauthenticated Detection

Detects unauthenticated access to Prometheus Time Series Collection and Processing Server by checking for specific elements in the response from the /graph endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Detects unauthenticated access to Prometheus Time Series Collection and Processing...

Thanos Prometheus Setup - Exposure Detection

Thanos graph endpoint was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Thanos graph endpoint was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Thanos Prometheus Setup - Exposure Detection',...

Prometheus Metrics - Detect

Prometheus metrics page was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus metrics page was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Prometheus Metrics - Detect', 'description':...

Exposed Prometheus Detection

Prometheus instance is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus instance is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Exposed Prometheus Detection', 'description': 'Prometheus...

Prometheus Promtail - Exposure Detection

Prometheus Promtail is an agent that gathers log data from various sources, such as files or systemd journal. !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus Promtail is an agent that gathers log data from various sources, such as files or systemd journal.""" from kittysploit import from...

Prometheus Pushgateway Panel - Detect

Prometheus Pushgateway panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus Pushgateway panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Prometheus Pushgateway Panel - Detect...

Prometheus exporter detect

Prometheus exporter detector !/usr/bin/env python3 -- coding: utf-8 -- """Prometheus exporter detector.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Prometheus exporter detect', 'description': 'Prometheus exporter...

Prometheus targets API endpoint Detection

The targets endpoint exposes services belonging to the infrastructure, including their roles and labels. In addition to showing the target machine addresses, the endpoint also exposes metadata labels that are added by the target provider. These labels are intended to contain non-sensitive values,...

Prometheus Config API Endpoint Discovery Detection

A Prometheus config API endpoint was discovered. The config endpoint returns the loaded Prometheus configuration file along with the addresses of targets and alerting/discovery services alongside the credentials required to access them. Usually, Prometheus replaces the passwords in the credential...