Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-5j8b-9c5q-syg6
Vulnerability ID VCID-5j8b-9c5q-syg6
Aliases CVE-2026-42151
GHSA-wg65-39gg-5wfj
Summary
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-312 Cleartext Storage of Sensitive Information
System Score Found at
epss 0.0001 https://api.first.org/data/v1/epss?cve=CVE-2026-42151
epss 0.0001 https://api.first.org/data/v1/epss?cve=CVE-2026-42151
cvssv3.1 7.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 7.5 https://github.com/prometheus/prometheus
generic_textual HIGH https://github.com/prometheus/prometheus
cvssv3.1 7.5 https://github.com/prometheus/prometheus/pull/18587
generic_textual HIGH https://github.com/prometheus/prometheus/pull/18587
ssvc Track https://github.com/prometheus/prometheus/pull/18587
cvssv3.1 7.5 https://github.com/prometheus/prometheus/pull/18590
generic_textual HIGH https://github.com/prometheus/prometheus/pull/18590
ssvc Track https://github.com/prometheus/prometheus/pull/18590
cvssv3.1 7.5 https://github.com/prometheus/prometheus/releases/tag/v3.11.3
generic_textual HIGH https://github.com/prometheus/prometheus/releases/tag/v3.11.3
ssvc Track https://github.com/prometheus/prometheus/releases/tag/v3.11.3
cvssv3.1 7.5 https://github.com/prometheus/prometheus/releases/tag/v3.5.3
generic_textual HIGH https://github.com/prometheus/prometheus/releases/tag/v3.5.3
ssvc Track https://github.com/prometheus/prometheus/releases/tag/v3.5.3
cvssv3.1 7.5 https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj
generic_textual HIGH https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj
ssvc Track https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2026-42151
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2026-42151
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-42151
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42151
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/prometheus/prometheus
https://nvd.nist.gov/vuln/detail/CVE-2026-42151
18587 https://github.com/prometheus/prometheus/pull/18587
18590 https://github.com/prometheus/prometheus/pull/18590
GHSA-wg65-39gg-5wfj https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj
v3.11.3 https://github.com/prometheus/prometheus/releases/tag/v3.11.3
v3.5.3 https://github.com/prometheus/prometheus/releases/tag/v3.5.3
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/prometheus/prometheus
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/prometheus/prometheus/pull/18587
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-04T19:54:39Z/ Found at https://github.com/prometheus/prometheus/pull/18587
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/prometheus/prometheus/pull/18590
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-04T19:54:39Z/ Found at https://github.com/prometheus/prometheus/pull/18590
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/prometheus/prometheus/releases/tag/v3.11.3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-04T19:54:39Z/ Found at https://github.com/prometheus/prometheus/releases/tag/v3.11.3
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/prometheus/prometheus/releases/tag/v3.5.3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-04T19:54:39Z/ Found at https://github.com/prometheus/prometheus/releases/tag/v3.5.3
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-04T19:54:39Z/ Found at https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2026-42151
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.01256
EPSS Score 0.0001
Published At May 5, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-30T16:21:07.925730+00:00 Alpine Linux Importer Import https://secdb.alpinelinux.org/v3.23/community.json 38.5.0