https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:22:14.345906+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09518 bdu:2026-09518 2026-10-04T08:22:14.545333+00:00 bdu:2026-09518 https://cve.radiocsirt.org/vuln/cleanstart-2026-gx27419 Withdrawn: CLEANSTART-2026-GX27419 — Security fixes for CVE-2026-21728, CVE-2026-2303, CVE-2026-28377, CVE-2026-39822, CVE-2026-42151, CVE-2026-42505, CVE-2… 2026-10-04T08:22:14.545376+00:00

Withdrawn by the publisher.

Affected: CleanStart: grafana

Multiple security vulnerabilities affect the grafana package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-365457 EUVD-2026-365457 2026-10-04T08:22:14.545441+00:00 EUVD-2026-365457 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21728 fkie_cve-2026-21728 2026-10-04T08:22:14.545456+00:00

Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.

Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18). Alternatively, automatically restart the service.

 https://cve.radiocsirt.org/vuln/ghsa-p4r4-xvrq-gvmc GHSA-p4r4-xvrq-gvmc — Grafana Tempo has an Uncontrolled Resource Consumption issue 2026-10-04T08:22:14.545481+00:00

Affected: Go: github.com/grafana/tempo

Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.

Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18).

 https://cve.radiocsirt.org/vuln/rhsa-2026:21769 RHSA-2026:21769 — Red Hat Security Advisory: Multicluster Global Hub 1.5.4 security update 2026-10-04T08:22:14.545506+00:00

grafana/tempo: Tempo: Denial of Service via large queries net/url: Incorrect parsing of IPv6 host literals in net/url crypto/x509: Incorrect enforcement of email constraints in crypto/x509 github.com/nats-io/nats-server: NATS-Server: Denial of Service via malformed WebSockets frame github.com/nats-io/nats-server: NATS-Server: Denial of Service via leafnode compression crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation nats-server: NATS-Server: Session and message hijacking via MQTT Client ID malfeasance nats-server: github.com/nats-io/nats-server: NATS-Server: Information disclosure of MQTT passwords through monitoring endpoints nats-server: github.com/nats-io/nats-server: NATS-Server: Access control bypass via unapplied ACLs in MQTT namespace nats-server: github.com/nats-io/nats-server: NATS-Server: Denial of Service via mal…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2342 WID-SEC-W-2026-2342 — Grafana Tempo: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-04T08:22:14.545584+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Grafana Tempo ausnutzen, um einen Denial of Service Angriff durchzuführen.