{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"prometheus-blackbox-exporter","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NHYZRWCMF0BGF2G5KSC3ER","modified_at":"2026-10-23T18:04:52.480929804Z","published_at":"2023-04-26T00:15:09.227Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-26735","https://security-tracker.debian.org/tracker/CVE-2023-26735"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-26735","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-26735"}],"summary":"blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resou"}