Get real-time updates on Telegram

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

CVE-2026-81870 affects azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0. EPSS 0.00195 (percentile 0.08319), scored 2026-10-03. Fixed version: 0.75.0-r0. Fixed version: 1.54.0-r0. Fixed version: 0.120.0-r0. Fixed version: 0.120.0-r0. Fixed version: 0.75.0-r0. Fixed version: 1.54.0-r0.

Published 2026-10-05 08:15:52.636477+00:00

CVE

CVE-2026-81870

Product

azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0

CCR priority

0.0 /100 (P5)

EPSS

0.00195 · percentile 0.08305 · 2026-10-04

KEV

no

Affected products

• azl3 azurelinux-image-tools 1.6.0-2 on Azure Linux 3.0
• azl3 cert-manager 1.12.15-12 on Azure Linux 3.0
• azl3 containerd2 2.2.4-8 on Azure Linux 3.0
• azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0
• azl3 etcd 3.5.33-1 on Azure Linux 3.0
• azl3 flannel 0.24.2-31 on Azure Linux 3.0
• azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0
• azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0
• azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0
• azl3 moby-engine 25.0.3-20 on Azure Linux 3.0
• azl3 opa 0.63.0-5 on Azure Linux 3.0
• azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0
• azl3 azurelinux-image-tools 1.6.0-3 on Azure Linux 3.0
• azl3 docker-compose 2.27.0-14 on Azure Linux 3.0
• azl3 flannel 0.24.2-32 on Azure Linux 3.0
• azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0
• azl3 keda 2.14.1-19 on Azure Linux 3.0
• azl3 kubernetes 1.30.10-30 on Azure Linux 3.0
• azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0
• azl3 cri-tools 1.32.0-7 on Azure Linux 3.0
• azl3 docker-compose 2.27.0-13 on Azure Linux 3.0
• azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0
• azl3 keda 2.14.1-18 on Azure Linux 3.0
• azl3 kubernetes 1.30.10-29 on Azure Linux 3.0
• azl3 cert-manager 1.12.15-14 on Azure Linux 3.0
• azl3 cloud-provider-kubevirt 0.5.1-9 on Azure Linux 3.0
• azl3 containerd2 2.3.4-1 on Azure Linux 3.0
• azl3 cri-tools 1.32.0-8 on Azure Linux 3.0
• azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0
• azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0
• azl3 kube-vip-cloud-provider 0.0.10-10 on Azure Linux 3.0
• azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0
• azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0
• trivy-fips · Fixed version: 0.75.0-r0
• syft · Fixed version: 1.54.0-r0
• grype-fips · Fixed version: 0.120.0-r0
• grype · Fixed version: 0.120.0-r0
• trivy · Fixed version: 0.75.0-r0
• syft-fips · Fixed version: 1.54.0-r0

Provenance

• Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• OSV.dev · Source record · observed 2026-10-04 23:49:35.786600+00:00 UTC
• FIRST EPSS daily exploit-probability · Source record · observed 2026-10-05 08:16:32.814186+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-81870.html