DeutschShown in its original language — a full translation is planned for a future version.
Grafana: Mehrere Schwachstellen
view advisory published 2026-01-26
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um einen Denial of Service Angriff durchzuführen oder sich erhöhte Berechtigungen zu verschaffen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-21721US | —OT elevated | Exploit | ||
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management righ… | ||||
| CVE-2026-21720US | — | — | ||
Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot worker queue longer than three seconds, the handler ti… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:2914 vom 2026-02-18external
- Red Hat Security Advisory RHSA-2026:2920 vom 2026-02-18external
- Red Hat Security Advisory RHSA-2026:3078 vom 2026-02-23external
- Red Hat Security Advisory RHSA-2026:3529 vom 2026-03-02external
- Red Hat Security Advisory RHSA-2026:40138 vom 2026-07-15external
- Red Hat Security Advisory RHSA-2026:5633 vom 2026-03-24external
- Red Hat Security Advisory RHSA-2026:79243 vom 2026-10-08external
- Red Hat Security Advisory RHSA-2026:8229 vom 2026-04-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan