https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:33:21.899485+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-02136 bdu:2021-02136 2026-10-04T08:33:22.143299+00:00 bdu:2021-02136 https://cve.radiocsirt.org/vuln/bit-grafana-2020-13379 BIT-grafana-2020-13379 2026-10-04T08:33:22.143354+00:00

Affected: Bitnami: grafana

The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault.

 https://cve.radiocsirt.org/vuln/cnvd-2020-38223 cnvd-2020-38223 2026-10-04T08:33:22.143391+00:00 cnvd-2020-38223 https://cve.radiocsirt.org/vuln/euvd-2026-41712 EUVD-2026-41712 2026-10-04T08:33:22.143405+00:00 EUVD-2026-41712 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13379 fkie_cve-2020-13379 2026-10-04T08:33:22.143416+00:00

The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault.

 https://cve.radiocsirt.org/vuln/ghsa-wc9w-wvq2-ffm9 GHSA-wc9w-wvq2-ffm9 — Server Side Request Forgery in Grafana 2026-10-04T08:33:22.143439+00:00

Affected: Go: github.com/grafana/grafana

The avatar feature in Grafana (github.com/grafana/grafana/pkg/api/avatar) 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue that allows remote code execution. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on.

 https://cve.radiocsirt.org/vuln/gsd-2020-13379 gsd-2020-13379 2026-10-04T08:33:22.143461+00:00 gsd-2020-13379 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0892-1 openSUSE-SU-2020:0892-1 — Security update for grafana, grafana-piechart-panel, grafana-status-panel 2026-10-04T08:33:22.143472+00:00

Security update for grafana, grafana-piechart-panel, grafana-status-panel

 https://cve.radiocsirt.org/vuln/rhsa-2020:2676 RHSA-2020:2676 — Red Hat Security Advisory: grafana security update 2026-10-04T08:33:22.143490+00:00

grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL

 https://cve.radiocsirt.org/vuln/suse-su-2020:1970-1 SUSE-SU-2020:1970-1 — Security update for SUSE Manager Client Tools 2026-10-04T08:33:22.143504+00:00

Security update for SUSE Manager Client Tools