Where
-Infinity
0

Trending

Last week
Last month
Last year

Grafana GrafanaStored XSS in the table panel (TableNG)

Risk 52
Severity
6.8
First published (updated )
CVE-2026-8595

Grafana GrafanaPre-authentication denial of service via the OAuth login route

Risk 43
Severity
7.5
First published (updated )
CVE-2026-8609

Grafana GrafanaDenial of service via unbounded request body size

Risk 43
Severity
7.5
First published (updated )
CVE-2026-33382

Grafana GrafanaCross-Organization Public Dashboard Deletion via Missing Org Isolation

Risk 17
Severity
3.1
First published (updated )
CVE-2026-28378

Grafana GrafanaPre-authentication denial of service in the public dashboard query endpoint

Risk 43
Severity
7.5
First published (updated )
CVE-2026-42127
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana Labs Grafana Geomap panelStored XSS in the Geomap panel tile-layer attribution

Risk 39
Severity
7.3
EPSS
0.25%
First published (updated )
CVE-2026-9029

Grafana TempoPath traversal in the Tempo and Loki data source plugins

Risk 34
Severity
5.4
First published (updated )
CVE-2026-10601

Grafana GrafanaIDOR in Annotations API allows unprivileged users to DELETE annotation

Risk 22
Severity
4.3
First published (updated )
CVE-2026-28374

Grafana GrafanaGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro

Risk 38
Severity
6.5
First published (updated )
CVE-2026-33378

Grafana GrafanaGrafana plugin resources can lead to unbounded memory allocation

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28383
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana GrafanaAuth Proxy IPv6 whitelist bypass

Risk 56
Severity
7.4
First published (updated )
CVE-2026-33376

Grafana GrafanaBAC in Snapshot API allows deletion of unauthorized dashboard snapshots

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28380

Grafana GrafanaSQL Expressions Read File From Disk

Risk 38
Severity
6.5
First published (updated )
CVE-2026-33380

Grafana GrafanaUsers can generate Service Account tokens after permissions removal

Risk 60
Severity
8.1
First published (updated )
CVE-2026-33381

Grafana GrafanaDashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin

Risk 48
Severity
7.1
First published (updated )
CVE-2026-33377
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana GrafanaGrafana Live push endpoint allows unbounded memory allocation leading to OOM

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28376

Grafana GrafanaViewer-triggered race condition in Grafana Live leads to complete server crash

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28379

Grafana GrafanaGrafana Correlations: Cross-Tenant Data Disclosure and Permanent Deletion via Legacy org_id=0 Record

Risk 23
Severity
3.3
First published (updated )
CVE-2026-21727

Grafana Labs Grafana AlertingGrafana Alerting Editors can edit destination of webhooks they did not create

Risk 38
Severity
1.3
First published (updated )
CVE-2025-12141

Grafana GrafanaQuery resampling can cause unbounded memory allocations

Risk 38
Severity
6.5
First published (updated )
CVE-2026-27879
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana GrafanaGrafana Testdata datasource can issue unbounded memory allocations

Risk 38
Severity
6.5
First published (updated )
CVE-2026-28375

Grafana GrafanaRCE on Grafana via sqlExpressions

Risk 72
Severity
9.1
First published (updated )
CVE-2026-27876

Grafana GrafanaOpenFeature evaluation API reads input data with no bounds

Risk 43
Severity
7.5
First published (updated )
CVE-2026-27880

Grafana GrafanaPublic dashboards discloses all direct mode datasources

Risk 43
Severity
7.5
First published (updated )
CVE-2026-27877

Grafana GrafanaMissing Protected-field Authorization in Provisioning Contact Points API

Risk 34
Severity
5.4
First published (updated )
CVE-2026-21724
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Grafana GrafanaGrafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoS

Risk 38
Severity
6.5
First published (updated )
CVE-2026-33375

grafana/grafanaAuthorization Bypass via TOCTOU in Grafana Datasource Deletion by Name

Risk 15
Severity
2.6
First published (updated )
CVE-2026-21725

Grafana GrafanaXSS in Grafana Explore stack trace

Risk 51
Severity
6.8
First published (updated )
CVE-2025-41117

Grafana GrafanaPublic Dashboards time range restriction on annotations can be bypassed

Risk 27
Severity
5.3
First published (updated )
CVE-2026-21722

Grafana GrafanaDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation

Risk 43
Severity
8.1
EPSS
0.03%
First published (updated )
CVE-2026-21721
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203