CVE-2026-47701
OpenTelemetry Operator: ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth
CVSS score
7.7
EPSS probability
%0.5
Risk score
0.0
Published
28 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.3
CVE-2026-33701
OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution
O
Patch verifiedEPSS %1
7.5
CVE-2026-29181
OpenTelemetry-Go multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)
O
Patch verifiedEPSS %1
6.9
CVE-2026-55701
OpenTelemetry githubreceiver silently ignores configured required_headers authentication
O
Patch status unknownEPSS %1
5.3
CVE-2026-45292
opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation
O
Patch status unknownEPSS %1
6.3
CVE-2026-81872
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
O
Patch status unknownEPSS %0
5.3
CVE-2026-47256
OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token
O
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-47701"