https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:05:12.944010+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-01361 bdu:2020-01361 2026-10-02T12:05:13.091984+00:00 bdu:2020-01361 https://cve.radiocsirt.org/vuln/cnvd-2018-17485 cnvd-2018-17485 2026-10-02T12:05:13.092020+00:00 cnvd-2018-17485 https://cve.radiocsirt.org/vuln/euvd-2026-67614 EUVD-2026-67614 2026-10-02T12:05:13.092036+00:00 EUVD-2026-67614 https://cve.radiocsirt.org/vuln/fkie_cve-2018-15727 fkie_cve-2018-15727 2026-10-02T12:05:13.092049+00:00

Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.

 https://cve.radiocsirt.org/vuln/ghsa-rgjg-66cx-5x9m GHSA-rgjg-66cx-5x9m — Grafana Authentication Bypass 2026-10-02T12:05:13.092079+00:00

Affected: Go: github.com/grafana/grafana

Grafana before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.

### Specific Go Packages Affected github.com/grafana/grafana/pkg/api

 https://cve.radiocsirt.org/vuln/gsd-2018-15727 gsd-2018-15727 2026-10-02T12:05:13.092107+00:00 gsd-2018-15727 https://cve.radiocsirt.org/vuln/rhsa-2018:3829 RHSA-2018:3829 — Red Hat Security Advisory: RHGS WA security and bug fix update 2026-10-02T12:05:13.092120+00:00

grafana: authentication bypass knowing only a username of an LDAP or OAuth user

 https://cve.radiocsirt.org/vuln/suse-su-2020:1273-1 SUSE-SU-2020:1273-1 — Security update for grafana 2026-10-02T12:05:13.092138+00:00

Security update for grafana

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-15727 UBUNTU-CVE-2018-15727 2026-10-02T12:05:13.092165+00:00

Affected: Ubuntu:16.04:LTS: grafana

Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.

 https://cve.radiocsirt.org/vuln/vde-2026-064 VDE-2026-064 — METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3 2026-10-02T12:05:13.092185+00:00

Multiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be available in the upcoming releases.

Notice: LabX Standard was formerly known as LabX Cloud Local.