https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:43:53.741938+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-02011 bdu:2026-02011 2026-10-02T18:43:54.054284+00:00 bdu:2026-02011 https://cve.radiocsirt.org/vuln/bit-grafana-2026-21722 BIT-grafana-2026-21722 — Public Dashboards time range restriction on annotations can be bypassed 2026-10-02T18:43:54.054323+00:00

Affected: Bitnami: grafana

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange.

This did not leak any annotations that would not otherwise be visible on the public dashboard.

 https://cve.radiocsirt.org/vuln/euvd-2026-360219 EUVD-2026-360219 2026-10-02T18:43:54.054359+00:00 EUVD-2026-360219 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21722 fkie_cve-2026-21722 2026-10-02T18:43:54.054374+00:00

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange.

This did not leak any annotations that would not otherwise be visible on the public dashboard.

 https://cve.radiocsirt.org/vuln/ghsa-3f33-44xm-29m7 GHSA-3f33-44xm-29m7 2026-10-02T18:43:54.054398+00:00

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange.

This did not leak any annotations that would not otherwise be visible on the public dashboard.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:20654-1 openSUSE-SU-2026:20654-1 — Security update for grafana 2026-10-02T18:43:54.054414+00:00

Security update for grafana

 https://cve.radiocsirt.org/vuln/suse-su-2026:1013-1 SUSE-SU-2026:1013-1 — Security update 5.0.7 for Multi-Linux Manager Client Tools 2026-10-02T18:43:54.054448+00:00

Security update 5.0.7 for Multi-Linux Manager Client Tools

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-21722 UBUNTU-CVE-2026-21722 2026-10-02T18:43:54.054469+00:00

Affected: Ubuntu:16.04:LTS: grafana

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0405 WID-SEC-W-2026-0405 — Grafana: Mehrere Schwachstellen 2026-10-02T18:43:54.054488+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Informationen offenzulegen.