Prometheus Blackbox Exporter — known CVE vulnerabilities

Every CVE whose affected-product data names Prometheus Blackbox Exporter, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-26735 — CVSS 7.5 (high): blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to…
• CVE-2020-16248 — CVSS 5.8 (medium): Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be…