← Back

Blackbox Exporter

blackbox_exporter

Vendor: Prometheus • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-26735
1Prometheus
1Blackbox Exporter
Jul 9, 2026
Apr 26, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is...Show more
blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured.Show less
CVE-2020-16248
1Prometheus
1Blackbox Exporter
Jun 17, 2026
Aug 9, 2020
N/A· v4
5.8 MEDIUM· v3
5.0 MEDIUM· v2
Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability