MO
Product
monitoring-plugins
8
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 4Low 1
Watch
Add monitoring-plugins to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-67436 | 8.3 | Jul 29 | Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-* plugins Affected: <= 6.0.0 |
| CVE-2026-55426 | 7.8 | Aug 18 | linuxfabrik-lib: Local privilege escalation using embedded command Affected: < 6.0.0 |
| CVE-2026-52817 | 7.0 | Aug 18 | Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation Affected: < 5.1.0 |
| CVE-2026-67435 | 6.0 | Jul 29 | linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect Affected: < 6.0.0 |
| CVE-2026-67433 | 5.8 | Jul 29 | Linuxfabrik monitoring-plugins: Symlink following in logfile legacy database migration Affected: 6.0.0 |
| CVE-2026-73974 | 5.5 | Aug 18 | linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE) Affected: < 7.0.0 |
| CVE-2026-73973 | 5.5 | Aug 18 | Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE) Affected: < 7.0.0 |
| CVE-2026-53759 | 2.0 | Aug 18 | linuxfabrik-lib: Insecure creation of SQLite databases Affected: < 4.2.0 |
Showing 8