Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
nginx‑prometheus‑exporter‑fips could be exploited to run malicious code
published 3 months ago
Summary
The nginx‑prometheus‑exporter‑fips component in versions 1.5.1‑r0 and 1.5.1‑r1 contains several flaws that could let an attacker execute unwanted commands or access data. Updating to the newer release fixes these problems. Apply the latest version as soon as possible to keep your monitoring setup secure.
What to do
- Update cleanstart nginx-prometheus-exporter-fips to version 1.5.1-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | nginx-prometheus-exporter-fips |
< 1.5.1-r1 Fix: upgrade to 1.5.1-r1
|
Original advisory text
Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27140, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.5.1-r0, 1.5.1-r1
Multiple security vulnerabilities affect the nginx-prometheus-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-61726 URL
- https://osv.dev/vulnerability/CVE-2025-61727 URL
- https://osv.dev/vulnerability/CVE-2025-61728 URL
- https://osv.dev/vulnerability/CVE-2025-61729 URL
- https://osv.dev/vulnerability/CVE-2025-61730 URL
- https://osv.dev/vulnerability/CVE-2025-61731 URL
- https://osv.dev/vulnerability/CVE-2025-61732 URL
- https://osv.dev/vulnerability/CVE-2025-68119 URL
- https://osv.dev/vulnerability/CVE-2025-68121 URL
- https://osv.dev/vulnerability/CVE-2026-25679 URL
- https://osv.dev/vulnerability/CVE-2026-27139 URL
- https://osv.dev/vulnerability/CVE-2026-27140 URL
- https://osv.dev/vulnerability/CVE-2026-27142 URL
- https://osv.dev/vulnerability/CVE-2026-27143 URL
- https://osv.dev/vulnerability/CVE-2026-27144 URL
- https://osv.dev/vulnerability/CVE-2026-32280 URL
- https://osv.dev/vulnerability/CVE-2026-32281 URL
- https://osv.dev/vulnerability/CVE-2026-32282 URL
- https://osv.dev/vulnerability/CVE-2026-32283 URL
- https://osv.dev/vulnerability/CVE-2026-32288 URL
- https://osv.dev/vulnerability/CVE-2026-32289 URL
- https://osv.dev/vulnerability/CVE-2026-33811 URL
- https://osv.dev/vulnerability/CVE-2026-33814 URL
- https://osv.dev/vulnerability/CVE-2026-39817 URL
- https://osv.dev/vulnerability/CVE-2026-39819 URL
- https://osv.dev/vulnerability/CVE-2026-39820 URL
- https://osv.dev/vulnerability/CVE-2026-39823 URL
- https://osv.dev/vulnerability/CVE-2026-39825 URL
- https://osv.dev/vulnerability/CVE-2026-39826 URL
- https://osv.dev/vulnerability/CVE-2026-39836 URL
- https://osv.dev/vulnerability/CVE-2026-42499 URL
- https://osv.dev/vulnerability/CVE-2026-42501 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61726 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61727 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61728 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61729 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61730 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61731 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61732 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68119 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27140 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27143 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27144 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32280 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32281 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32282 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32283 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32288 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32289 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33811 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33814 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39817 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39819 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39820 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39823 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39825 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39826 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-39836 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-42499 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-42501 URL
Timeline
Published9 Jul 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-IV00591 · OSV
Track software like this
Free during beta