https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:13:58.771022+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-grafana-2026-12704 BIT-grafana-2026-12704 — SAML assertion replay via skipped InResponseTo validation 2026-10-03T06:13:58.826502+00:00

Affected: Bitnami: grafana

When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection, allowing an attacker who obtains a valid signed SAML assertion to replay it and gain a session as the victim user. Only instances with the allow_idp_initiated SAML setting enabled are affected; this setting is off by default and Grafana OSS is not affected.

 https://cve.radiocsirt.org/vuln/euvd-2026-363373 EUVD-2026-363373 2026-10-03T06:13:58.826560+00:00 EUVD-2026-363373 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12704 fkie_cve-2026-12704 2026-10-03T06:13:58.826577+00:00

When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection, allowing an attacker who obtains a valid signed SAML assertion to replay it and gain a session as the victim user. Only instances with the allow_idp_initiated SAML setting enabled are affected; this setting is off by default and Grafana OSS is not affected.

 https://cve.radiocsirt.org/vuln/ghsa-xgrw-968j-pp62 GHSA-xgrw-968j-pp62 2026-10-03T06:13:58.826603+00:00

When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection, allowing an attacker who obtains a valid signed SAML assertion to replay it and gain a session as the victim user. Only instances with the allow_idp_initiated SAML setting enabled are affected; this setting is off by default and Grafana OSS is not affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3190 WID-SEC-W-2026-3190 — Grafana Enterprise: Mehrere Schwachstellen ermöglichen Erlangen von Benutzer- oder Administratorrechten 2026-10-03T06:13:58.826620+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Grafana Enterprise ausnutzen, um Benutzer- oder Administratorrechte zu erlangen.