Поиск уязвимостей
Количество 29
Количество 29
RLSA-2026:54243
Important: grafana security update
ELSA-2026-54243
ELSA-2026-54243: grafana security update (IMPORTANT)
CVE-2026-42127
The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.
CVE-2026-42127
The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.
CVE-2026-42127
The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.
CVE-2026-33377
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
CVE-2026-33377
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
CVE-2026-33377
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
CVE-2026-33377
An Editor can overwrite a dashboard not owned by them to acquire admin ...
ALT-PU-2025-10789
ALT-PU-2025-10789: package `grafana` update to version 12.1.0-alt2
ALT-PU-2025-10637
ALT-PU-2025-10637: package `grafana` update to version 12.1.0-alt2
ROS-20260714-80-0067
Уязвимость grafana
RLSA-2026:54184
Important: grafana security update
GHSA-3w66-95m3-8jxg
Grafana: Pre-authentication denial of service in the public dashboard query handler
ELSA-2026-54184
ELSA-2026-54184: grafana security update (IMPORTANT)
BDU:2026-10801
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
GHSA-5cv7-h7gr-wjgh
An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.
BDU:2026-07034
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с перезаписью списков контроля доступа, позволяющая нарушителю повысить свои привилегии
ROS-20260714-73-0062
Уязвимость grafana
ROS-20260708-80-0036
Уязвимость grafana
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2026:54243 Important: grafana security update | около 2 месяцев назад | ||
| ELSA-2026-54243 ELSA-2026-54243: grafana security update (IMPORTANT) | 3 месяца назад | ||
 | CVE-2026-42127 The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability. | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-42127 The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability. | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-42127 The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability. | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-33377 An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege. | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-33377 An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege. | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-33377 An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege. | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-33377 An Editor can overwrite a dashboard not owned by them to acquire admin ... | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
| ALT-PU-2025-10789 ALT-PU-2025-10789: package `grafana` update to version 12.1.0-alt2 | CVSS3: 9.1 | около 1 года назад | |
| ALT-PU-2025-10637 ALT-PU-2025-10637: package `grafana` update to version 12.1.0-alt2 | CVSS3: 9.1 | около 1 года назад | |
 | ROS-20260714-80-0067 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| RLSA-2026:54184 Important: grafana security update | 0% Низкий | около 2 месяцев назад | |
| GHSA-3w66-95m3-8jxg Grafana: Pre-authentication denial of service in the public dashboard query handler | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| ELSA-2026-54184 ELSA-2026-54184: grafana security update (IMPORTANT) | 0% Низкий | 3 месяца назад | |
 | BDU:2026-10801 Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| GHSA-5cv7-h7gr-wjgh An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege. | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
| BDU:2026-07034 Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с перезаписью списков контроля доступа, позволяющая нарушителю повысить свои привилегии | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад |
| ROS-20260714-73-0062 Уязвимость grafana | CVSS3: 7.5 | 0% Низкий | 4 месяца назад |
| ROS-20260708-80-0036 Уязвимость grafana | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу