5 entries matching grafana — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-103506 | An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required | HIGH | 8.9 | 19%ile | NVD | 2026-10-28 |
| CVE-2026-88967 | A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-contro | HIGH | 7.7 | 22%ile | NVD | 2026-10-28 |
| CVE-2026-88858 | A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression (uncontr | MEDIUM | 6.5 | 27%ile | NVD | 2026-10-28 |
| CVE-2026-79656 | A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC | MEDIUM | 6.0 | 5%ile | NVD | 2026-10-28 |
| CVE-2026-16491 | Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted | MEDIUM | 6.5 | 22%ile | NVD | 2026-10-27 |