Prometheus Azure AD remote write OAuth client secret exposed via config API
Summary
| CVE | CVE-2026-42151 |
|---|---|
| State | PUBLISHED |
| Assigner | GitHub_M |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-05-04 19:16:04 UTC |
| Updated | 2026-07-31 13:18:35 UTC |
| Description | Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret field in the Azure AD remote write OAuth configuration (storage/remote/azuread) was typed as string instead of Secret. Prometheus redacts fields of type Secret when serving the configuration via the /-/config HTTP API endpoint. Because the field was a plain string, the Azure OAuth client secret was exposed in plaintext to any user or process with access to that endpoint. This issue has been patched in versions 3.5.3 and 3.11.3. |
Risk And Classification
Primary CVSS: v3.1 7.5 HIGH from ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.000100000 probability, percentile 0.010590000 (date 2026-05-12)
Problem Types: CWE-200 | CWE-312 | CWE-256 | CWE-200 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor | CWE-312 CWE-312: Cleartext Storage of Sensitive Information | CWE-256 Plaintext Storage of a Password
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ADP | CVSS | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | [email protected] | Secondary | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | Secondary | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | CNA | DECLARED | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Prometheus | Prometheus | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Prometheus | Prometheus | affected < 3.5.3 | Not specified |
| CNA | Prometheus | Prometheus | affected >= 3.6.0, < 3.11.3 | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 10 | unaffected 0:0.152.1-1.el10_2 * rpm | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:0.152.1-1.el9_8 * rpm | Not specified |
| ADP | Red Hat | RHEM 1.0 For RHEL 9 | unaffected 0:1.0.3-1.el9em * rpm | Not specified |
| ADP | Red Hat | RHEM 1.1 For RHEL 10 | unaffected 0:1.1.3-1.el10em * rpm | Not specified |
| ADP | Red Hat | RHEM 1.1 For RHEL 9 | unaffected 0:1.1.3-1.el9em * rpm | Not specified |
| ADP | Red Hat | Logging Subsystem For Red Hat OpenShift 6.2 | unaffected 1784747884 * rpm | Not specified |
| ADP | Red Hat | Logging Subsystem For Red Hat OpenShift 6.2 | unaffected 1784747816 * rpm | Not specified |
| ADP | Red Hat | Logging Subsystem For Red Hat OpenShift 6.2 | unaffected 1784747815 * rpm | Not specified |
| ADP | Red Hat | Multicluster Global Hub 1.4.5 | unaffected 1784060681 * rpm | Not specified |
| ADP | Red Hat | Multicluster Global Hub 1.6.2 | unaffected 1784561376 * rpm | Not specified |
| ADP | Red Hat | Multicluster Global Hub 1.7.2 | unaffected 1784906628 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502022 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502465 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502025 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502494 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502401 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502403 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502022 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502023 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502029 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.0 | unaffected 1783502445 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194638 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194353 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784196588 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784195620 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194309 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194144 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194188 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194653 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194144 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194980 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194347 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784194971 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784128388 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784128860 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126780 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127787 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126762 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127762 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126832 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126774 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127791 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127135 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784126733 * rpm | Not specified |
| ADP | Red Hat | Red Hat Edge Manager 1.1 | unaffected 1784127775 * rpm | Not specified |
| ADP | Red Hat | Red Hat Hardened Images | unaffected 2.19.0-1.hum1 * rpm | Not specified |
| ADP | Red Hat | Red Hat Hardened Images | unaffected 0.153.0-1.hum1 * rpm | Not specified |
| ADP | Red Hat | Red Hat Hardened Images | unaffected 0.153.0-1.hum1 * rpm | Not specified |
| ADP | Red Hat | Red Hat Multicluster Global Hub 1.5.0 | unaffected 1784562060 * rpm | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4.22 | unaffected 1784125078 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.1 | unaffected 1783750447 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.12 | unaffected 1783751865 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.12 | unaffected 1784353904 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.15 | unaffected 1784351966 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.16 | unaffected 1783955846 * rpm | Not specified |
| ADP | Red Hat | Red Hat Quay 3.9 | unaffected 1784125838 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968861 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968861 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968468 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783960127 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968861 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.3 | unaffected 1783968861 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 4-1.4.2 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 4-1.4.3 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783326748 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Red Hat Trusted Artifact Signer 1.4 | unaffected 1783329793 * rpm | Not specified |
| ADP | Red Hat | Custom Metric Autoscaler Operator For Red Hat Openshift | Not specified | Not specified |
| ADP | Red Hat | Custom Metric Autoscaler Operator For Red Hat Openshift | Not specified | Not specified |
| ADP | Red Hat | Custom Metric Autoscaler Operator For Red Hat Openshift | Not specified | Not specified |
| ADP | Red Hat | Custom Metric Autoscaler Operator For Red Hat Openshift | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | File Integrity Operator | Not specified | Not specified |
| ADP | Red Hat | Logging Subsystem For Red Hat OpenShift | Not specified | Not specified |
| ADP | Red Hat | Network Observability Operator | Not specified | Not specified |
| ADP | Red Hat | Network Observability Operator | Not specified | Not specified |
| ADP | Red Hat | OpenShift Lightspeed | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 2 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 2 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 2 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 2 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 3 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 3 | Not specified | Not specified |
| ADP | Red Hat | OpenShift Service Mesh 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Advanced Cluster Management For Kubernetes 2 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 5 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 6 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 6 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 7 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 7 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 8 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 8 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Ceph Storage 9 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 10 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 8 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Enterprise Linux 9 | Not specified | Not specified |
| ADP | Red Hat | Red Hat Hardened Images | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift AI RHOAI | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift Distributed Tracing 3 | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift GitOps | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenShift GitOps | Not specified | Not specified |
| ADP | Red Hat | Red Hat OpenStack Platform 18.0 | Not specified | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| access.redhat.com/errata/RHSA-2026:40118 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:34357 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:36797 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/pull/18587 | [email protected] | github.com | Issue Tracking, Patch |
| access.redhat.com/errata/RHSA-2026:41031 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:37272 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:36651 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:47149 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:47952 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:25504 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40945 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:37267 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40974 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:43052 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| bugzilla.redhat.com/show_bug.cgi | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | bugzilla.redhat.com | |
| security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42151.json | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | security.access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40970 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:44622 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40262 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:42852 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/releases/tag/v3.5.3 | [email protected] | github.com | Release Notes |
| access.redhat.com/errata/RHSA-2026:37271 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:25039 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40768 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:41030 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/pull/18590 | [email protected] | github.com | Issue Tracking, Patch |
| access.redhat.com/errata/RHSA-2026:42146 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:36796 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:34359 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj | [email protected] | github.com | Vendor Advisory |
| access.redhat.com/errata/RHSA-2026:41066 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| github.com/prometheus/prometheus/releases/tag/v3.11.3 | [email protected] | github.com | Release Notes |
| access.redhat.com/errata/RHSA-2026:41019 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40972 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:25245 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/security/cve/CVE-2026-42151 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:42796 | 0b0ca135-0b70-47e7-9f44-1890c2a1c46c | access.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| ADP | 2026-05-04T19:02:26.983Z | Reported to Red Hat. |
| ADP | 2026-05-04T18:12:16.917Z | Made public. |
Solutions
ADP: RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9
ADP: RHSA-2026:36796: RHEM 1.0 for RHEL 9
ADP: RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)
ADP: RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)
ADP: RHSA-2026:47952: Logging Subsystem for Red Hat OpenShift 6.2
ADP: RHSA-2026:41030: Multicluster Global Hub 1.4.5
ADP: RHSA-2026:44622: Multicluster Global Hub 1.6.2
ADP: RHSA-2026:47149: Multicluster Global Hub 1.7.2
ADP: RHSA-2026:36651: Red Hat Edge Manager 1.0
ADP: RHSA-2026:40945: Red Hat Edge Manager 1.1
ADP: RHSA-2026:40118: Red Hat Edge Manager 1.1
ADP: RHSA-2026:25039: Red Hat Hardened Images
ADP: RHSA-2026:25504: Red Hat Hardened Images
ADP: RHSA-2026:25245: Red Hat Hardened Images
ADP: RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22
ADP: RHSA-2026:42146: Red Hat Quay 3.12
ADP: RHSA-2026:43052: Red Hat Quay 3.12
ADP: RHSA-2026:42796: Red Hat Quay 3.15
ADP: RHSA-2026:41066: Red Hat Quay 3.16
ADP: RHSA-2026:41031: Red Hat Quay 3.1
ADP: RHSA-2026:40262: Red Hat Quay 3.9
ADP: RHSA-2026:40974: Red Hat Trusted Artifact Signer 1.3
ADP: RHSA-2026:40970: Red Hat Trusted Artifact Signer 1.3
ADP: RHSA-2026:40972: Red Hat Trusted Artifact Signer 1.3
ADP: RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4
ADP: RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4
ADP: RHSA-2026:37267: Red Hat Trusted Artifact Signer 1.4
ADP: RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4
ADP: RHSA-2026:42852: Red Hat multicluster global hub 1.5.0
There are currently no legacy QID mappings associated with this CVE.