Sploitus

10 exploited vulnerabilities in Prometheus

Vulnerabilities with publicly known exploits

Vendors
Unknown, Rocky Linux, Go, Grafana, Red Hat, Github.Com/Buger/Jsonparser
With known exploits
10
Affected Jason Orcutt Prometheus versions
= 3.0_beta, 4.0_beta, 6.0
Affected Golang Go versions
< 1.25.12, 1.26.5, 1.27

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2026-44903
CVSS 9.8 CRITICAL 2026-05-05FIX AVAILABLE
CVE-2026-42154
CVSS 9.8 CRITICAL 2026-05-04FIX AVAILABLE
CVE-2026-32285
CVSS 9.8 CRITICAL 2026-03-16FIX AVAILABLE
CVE-2026-26069
CVSS 9.1 CRITICAL 2026-02-12FIX AVAILABLE
CVE-2026-24892
CVSS 8.8 HIGH 2026-02-20FIX AVAILABLE
CVE-2026-42151
CVSS 7.5 HIGH 2026-05-04FIX AVAILABLE
CVE-2002-1211 1 exploit
CVSS 7.5 HIGH 2002-11-12
Jason Orcutt Prometheus 3.0/4.0/6.0 - Remote File Inclusion
CVE-2018-18644
CVSS 6.5 MEDIUM 2018-12-04FIX AVAILABLE
CVE-2026-40179
CVSS 6.1 MEDIUM 2026-04-13FIX AVAILABLE
CVE-2026-42505
CVSS 5.3 MEDIUM 2026-07-07