Поиск уязвимостей
Количество 42
Количество 42
RLSA-2026:54178
Moderate: grafana security, bug fix, and enhancement update
ELSA-2026-54178
ELSA-2026-54178: grafana security, bug fix, and enhancement update (MODERATE)
RLSA-2026:58982
Moderate: grafana security, bug fix, and enhancement update
ELSA-2026-58982
ELSA-2026-58982: grafana security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2026:3718-1
Security update for grafana
CVE-2026-33376
When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.
CVE-2026-33376
When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.
CVE-2026-33376
When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.
CVE-2026-33376
When using an IPv6 allow-list for the Auth Proxy feature, it defaults ...
GHSA-3r2p-7499-27q3
When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here.
BDU:2026-07040
Уязвимость функции Auth Proxy платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю обойти ограничения безопасности
ELSA-2026-90811
ELSA-2026-90811: grafana security update (MODERATE)
openSUSE-SU-2026:20940-1
Security update for grafana
ROS-20260708-80-0035
Уязвимость grafana
ROS-20260708-73-0029
Уязвимость grafana
ALT-PU-2025-10789
ALT-PU-2025-10789: package `grafana` update to version 12.1.0-alt2
ALT-PU-2025-10637
ALT-PU-2025-10637: package `grafana` update to version 12.1.0-alt2
CVE-2026-33377
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
CVE-2026-33377
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
CVE-2026-33377
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2026:54178 Moderate: grafana security, bug fix, and enhancement update | 3 месяца назад | ||
| ELSA-2026-54178 ELSA-2026-54178: grafana security, bug fix, and enhancement update (MODERATE) | 3 месяца назад | ||
| RLSA-2026:58982 Moderate: grafana security, bug fix, and enhancement update | 3 месяца назад | ||
| ELSA-2026-58982 ELSA-2026-58982: grafana security, bug fix, and enhancement update (MODERATE) | 3 месяца назад | ||
 | SUSE-SU-2026:3718-1 Security update for grafana | 3 месяца назад | ||
 | CVE-2026-33376 When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here. | CVSS3: 7.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-33376 When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here. | CVSS3: 7.4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-33376 When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here. | CVSS3: 7.4 | 0% Низкий | 6 месяцев назад |
| CVE-2026-33376 When using an IPv6 allow-list for the Auth Proxy feature, it defaults ... | CVSS3: 7.4 | 0% Низкий | 6 месяцев назад |
| GHSA-3r2p-7499-27q3 When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask (usually /128) to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here. | CVSS3: 7.4 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-07040 Уязвимость функции Auth Proxy платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю обойти ограничения безопасности | CVSS3: 7.4 | 0% Низкий | 6 месяцев назад |
| ELSA-2026-90811 ELSA-2026-90811: grafana security update (MODERATE) | 7 дней назад | ||
| openSUSE-SU-2026:20940-1 Security update for grafana | 5 месяцев назад | ||
 | ROS-20260708-80-0035 Уязвимость grafana | CVSS3: 7.4 | 0% Низкий | 4 месяца назад |
| ROS-20260708-73-0029 Уязвимость grafana | CVSS3: 7.4 | 0% Низкий | 4 месяца назад |
| ALT-PU-2025-10789 ALT-PU-2025-10789: package `grafana` update to version 12.1.0-alt2 | CVSS3: 9.1 | около 1 года назад | |
| ALT-PU-2025-10637 ALT-PU-2025-10637: package `grafana` update to version 12.1.0-alt2 | CVSS3: 9.1 | около 1 года назад | |
| CVE-2026-33377 An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege. | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-33377 An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege. | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-33377 An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege. | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу