Back to the CVE list
CVE-2026-4017

CVE-2026-4017

CVSS score

7.4

EPSS probability

%0.1

Risk score

0.0

Published

3 mo ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

A minimal, dependency-light proof of concept for CVE-2026-40179 (GHSA-vffh-x6r8-xx99): stored cross-site scripting in the Prometheus web UI, delivered through an unauthenticated remote_write endpoint.

Public PoCSource updated: 31.08.2026 08:27:06

Saku0512/CVE-2026-40176-poc

Public PoCSource updated: 27.06.2026 13:53:30

ikarolaborda/CVE-2026-40176

Public PoCSource updated: 15.06.2026 11:31:20

daptheHuman/cve-2026-40176-cve-2026-40261

Public PoCSource updated: 17.04.2026 05:53:59

pjt3591oo/CVE-2026-40175-poc

Public PoCSource updated: 17.04.2026 03:36:09

terminat0r7031/composer-CVE-2026-40261-CVE-2026-40176-PoC

Public PoCSource updated: 17.04.2026 09:41:13

CVE-2026-40175

Public PoCSource updated: 12.04.2026 10:24:39

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-4017"