https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:16:49.661454+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-grafana-2022-26148 BIT-grafana-2022-26148 2026-10-03T18:16:49.762030+00:00

Affected: Bitnami: grafana

An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in api_jsonrpc.php to discover the Zabbix account password and URL address.

 https://cve.radiocsirt.org/vuln/cnvd-2022-25208 cnvd-2022-25208 2026-10-03T18:16:49.762087+00:00 cnvd-2022-25208 https://cve.radiocsirt.org/vuln/euvd-2026-14847 EUVD-2026-14847 2026-10-03T18:16:49.762105+00:00 EUVD-2026-14847 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26148 fkie_cve-2022-26148 2026-10-03T18:16:49.762117+00:00

An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in api_jsonrpc.php to discover the Zabbix account password and URL address.

 https://cve.radiocsirt.org/vuln/ghsa-97c5-jw9r-3fwj GHSA-97c5-jw9r-3fwj 2026-10-03T18:16:49.762139+00:00

An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in api_jsonrpc.php to discover the Zabbix account password and URL address.

 https://cve.radiocsirt.org/vuln/gsd-2022-26148 gsd-2022-26148 2026-10-03T18:16:49.762154+00:00 gsd-2022-26148 https://cve.radiocsirt.org/vuln/rhsa-2023:3642 RHSA-2023:3642 — Red Hat Security Advisory: Red Hat Ceph Storage 6.1 Container security and bug fix update 2026-10-03T18:16:49.762164+00:00

ramda: prototype poisoning eventsource: Exposure of Sensitive Information golang: net/http: improper sanitization of Transfer-Encoding header golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters marked: regular expression block.def may lead Denial of Service marked: regular expression inline.reflinkSearch may lead Denial of Service grafana: Use of Cache Containing Sensitive Information golang: encoding/pem: fix stack overflow in Decode Moment.js: Path traversal in moment.locale grafana: An information leak issue was discovered in Grafana through 7.3.4, when integrated with Zabbix golang: net/http: handle server errors after sending GOAWAY golang: encoding/xml: stack exhaustion in Decoder.Skip golang: crypto/elliptic: panic caused by oversized scalar golang: syscall: faccessat checks wrong group golang: crypto/tls: session tickets lack random ticket_age_add golang: io/fs: stack exhaustion in Glob golang: compress/gzip: stack exhaustion in Reader.Read golang: path/filepath: stack exhaustion in Glob golang: encoding/xml: stack exhaustion in Unmarshal golang: encoding/gob: stack exhaustion in Decoder.Decode grafana: stored XSS vulnerability grafana: OAuth account takeover grafana: plugin signature bypass grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working golang: math/big: decoding big.Float and big.Rat…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-26148 UBUNTU-CVE-2022-26148 2026-10-03T18:16:49.762226+00:00

Affected: Ubuntu:16.04:LTS: grafana

An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in api_jsonrpc.php to discover the Zabbix account password and URL address.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1484 WID-SEC-W-2023-1484 — Grafana: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T18:16:49.762258+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um Informationen offenzulegen.