https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:29:52.388197+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03204 bdu:2023-03204 2026-10-02T20:29:52.554329+00:00 bdu:2023-03204 https://cve.radiocsirt.org/vuln/bit-grafana-2023-2801 BIT-grafana-2023-2801 2026-10-02T20:29:52.554379+00:00

Affected: Bitnami: grafana

Grafana is an open-source platform for monitoring and observability.

Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.

The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly.

This might enable malicious users to crash Grafana instances through that endpoint.

Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0497 certfr-2023-avi-0497 — De multiples vulnérabilités ont été découvertes dans Grafana. Elles permettent à un attaquant de provoquer un contourne… 2026-10-02T20:29:52.554422+00:00 certfr-2023-avi-0497 https://cve.radiocsirt.org/vuln/euvd-2026-216373 EUVD-2026-216373 2026-10-02T20:29:52.554442+00:00 EUVD-2026-216373 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2801 fkie_cve-2023-2801 2026-10-02T20:29:52.554454+00:00

Grafana is an open-source platform for monitoring and observability.

Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.

The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly.

This might enable malicious users to crash Grafana instances through that endpoint.

Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.

 https://cve.radiocsirt.org/vuln/ghsa-x2w4-c67p-g44j GHSA-x2w4-c67p-g44j — Grafana Missing Synchronization vulnerability 2026-10-02T20:29:52.554481+00:00

Affected: Go: github.com/grafana/grafana

Grafana is an open-source platform for monitoring and observability.

Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.

The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly.

This might enable malicious users to crash Grafana instances through that endpoint.

Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.

 https://cve.radiocsirt.org/vuln/gsd-2023-2801 gsd-2023-2801 2026-10-02T20:29:52.554509+00:00 gsd-2023-2801 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13027-1 openSUSE-SU-2024:13027-1 — grafana-10.0.1-2.1 on GA media 2026-10-02T20:29:52.554521+00:00

grafana-10.0.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:7740 RHSA-2023:7740 — Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancements, and bug fix update 2026-10-02T20:29:52.554540+00:00

grafana: missing access control allows test alerts by underprivileged user grafana: data source proxy race condition

 https://cve.radiocsirt.org/vuln/suse-su-2023:2915-1 SUSE-SU-2023:2915-1 — Security update for SUSE Manager Client Tools 2026-10-02T20:29:52.554559+00:00

Security update for SUSE Manager Client Tools

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-2801 UBUNTU-CVE-2023-2801 2026-10-02T20:29:52.554583+00:00

Affected: Ubuntu:16.04:LTS: grafana

Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance. The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly. This might enable malicious users to crash Grafana instances through that endpoint. Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1384 WID-SEC-W-2023-1384 — Grafana: Mehrere Schwachstellen 2026-10-02T20:29:52.554607+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuführen.