An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive information.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://security.paloaltonetworks.com/CVE-2026-0239 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.9 · paloaltonetworksNVD modified 2026-10-26 14:10
Affected (CPE criteria) 1
cpe:2.3:a:paloaltonetworks:chronosphere_collector:*:*:*:*:*:*:*:*
References 1
- https://security.paloaltonetworks.com/CVE-2026-0239 Vendor Advisory