1. Home
  2. CVE Database
  3. CVE-2026-0239
MEDIUM · 6.5

CVE-2026-0239

An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive information.

Vulnerability Description

An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive information.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
PaloaltonetworksChronosphere Collector< 0.116.0

Related Weaknesses (CWE)

CWE-497

References

FAQ

What is CVE-2026-0239?

CVE-2026-0239 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive information.

How severe is CVE-2026-0239?

CVE-2026-0239 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-0239?

Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Chronosphere Collector.