CVE-2026-0239

An information disclosure vulnerability in the Chronosphere Chronocollector enables an unauthenticated attacker with network access to the collector service to retrieve sensitive information.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@paloaltonetworks.com

Published

2026-05-13

Last modified

2026-10-26

Weaknesses

CWE-497

Affected products

• Chronosphere Chronocollector (Palo Alto Networks)
• Chronosphere Collector (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2026-0239