Поиск уязвимостей
Количество 8
Количество 8
BDU:2026-12009
Уязвимость компонента Alertmanager Templates Test Endpoint платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2026-21723
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled.
CVE-2026-21723
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled.
ROS-20260728-80-0013
Уязвимость grafana
ROS-20260728-73-0011
Уязвимость grafana
GHSA-xcrm-48rh-35pj
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled.
openSUSE-SU-2026:22125-1
Security update for grafana
SUSE-SU-2026:4600-1
Security update for grafana, system-user-grafana
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-12009 Уязвимость компонента Alertmanager Templates Test Endpoint платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-21723 The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-21723 The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | ROS-20260728-80-0013 Уязвимость grafana | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
| ROS-20260728-73-0011 Уязвимость grafana | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
| GHSA-xcrm-48rh-35pj The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
 | openSUSE-SU-2026:22125-1 Security update for grafana | 20 дней назад | ||
| SUSE-SU-2026:4600-1 Security update for grafana, system-user-grafana | около 1 месяца назад |
Уязвимостей на страницу