Login Request a demo
PR
Product
prometheus
by prometheus · last CVE May 26, 2026
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add prometheus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-44903
6.1
0%
May 26
Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI
Affected: >= 2.49.0, < 3.5.3; >= 3.6.0-rc.0, < 3.11.3
CVE-2026-40179
6.1
0%
Apr 15
Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer
Affected: >= 3.0.0, < 3.5.2; >= 3.6.0, < 3.11.2; < 0.311.2-0.20260410083055-07c6232d159b
CVE-2021-29622
6.1
20%
May 19
Prometheus is an open-source monitoring system and time series database
Affected: 2.23.0 before 2.26.1; 2.27.0; 2.27.0
CVE-2019-3826
6.1
3%
Mar 26
A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1
Affected: before 2.7.1
Showing 4