https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:46:32.104323+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01927 bdu:2024-01927 2026-10-04T03:46:32.114470+00:00 bdu:2024-01927 https://cve.radiocsirt.org/vuln/bit-grafana-2024-1442 BIT-grafana-2024-1442 — User with permissions to create a data source can CRUD all data sources 2026-10-04T03:46:32.114511+00:00

Affected: Bitnami: grafana

A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0193 certfr-2024-avi-0193 — Une vulnérabilité a été découverte dans Grafana. Elle permet à un attaquant de provoquer une atteinte à l'intégrité des… 2026-10-04T03:46:32.114547+00:00 certfr-2024-avi-0193 https://cve.radiocsirt.org/vuln/euvd-2026-203691 EUVD-2026-203691 2026-10-04T03:46:32.114564+00:00 EUVD-2026-203691 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1442 fkie_cve-2024-1442 2026-10-04T03:46:32.114576+00:00

A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.

 https://cve.radiocsirt.org/vuln/ghsa-5mxf-42f5-j782 GHSA-5mxf-42f5-j782 — Grafana's users with permissions to create a data source can CRUD all data sources 2026-10-04T03:46:32.114599+00:00

Affected: Go: github.com/grafana/grafana

A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.

 https://cve.radiocsirt.org/vuln/gsd-2024-1442 gsd-2024-1442 2026-10-04T03:46:32.114624+00:00 gsd-2024-1442 https://cve.radiocsirt.org/vuln/rhsa-2024:2633 RHSA-2024:2633 — Red Hat Security Advisory: updated rhceph-6.1 container image 2026-10-04T03:46:32.114636+00:00

HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients grafana: Improper priviledge managent for users with data source permissions

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1442 UBUNTU-CVE-2024-1442 2026-10-04T03:46:32.114658+00:00

Affected: Ubuntu:16.04:LTS: grafana

A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *. Doing this will grant the user access to read, query, edit and delete all data sources within the organization.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0585 WID-SEC-W-2024-0585 — Grafana: Schwachstelle ermöglicht Privilegieneskalation 2026-10-04T03:46:32.114675+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um seine Privilegien zu erhöhen.