BIT-grafana-2026-21723

vendorUSosv

CVE-2026-21723 Record

view advisory published 2026-07-29Licence: per source

The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-21723US	—	0.21% (12th)	—	2026-07-23
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short p…

references

External citations — patches, advisories, analysis.

https://grafana.com/security/security-advisories/cve-2026-21723WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-21723WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan