PT-2026-40750 · Chronosphere · Chronocollector

Published 2026-05-13 · Updated 2026-05-13 · CVE-2026-0239

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chronosphere Chronocollector (affected versions not specified)

Description An information disclosure issue allows an unauthenticated attacker with network access to the collector service to retrieve sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2026-07181

CVE-2026-0239

Affected Products

Chronocollector

References · 4

• https://bdu.fstec.ru/vul/2026-07181 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0239 · Security Note
• https://security.paloaltonetworks.com/CVE-2026-0239 · Vendor Advisory
• https://twitter.com/infoflowcloud/status/2054711110108856367 · Twitter Post