https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:19:49.592874+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02572 bdu:2024-02572 2026-10-06T08:19:49.701753+00:00 bdu:2024-02572 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0847 certfr-2023-avi-0847 — Une vulnérabilité a été découverte dans Grafana. Elle permet à un attaquant de provoquer une élévation de privilèges. 2026-10-06T08:19:49.701796+00:00 certfr-2023-avi-0847 https://cve.radiocsirt.org/vuln/euvd-2026-266988 EUVD-2026-266988 2026-10-06T08:19:49.701815+00:00 EUVD-2026-266988 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4822 fkie_cve-2023-4822 2026-10-06T08:19:49.701826+00:00

Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.

It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.

This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.

The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.

 https://cve.radiocsirt.org/vuln/ghsa-fw9c-75hh-89p6 GHSA-fw9c-75hh-89p6 — Grafana privilege escalation vulnerability 2026-10-06T08:19:49.701863+00:00

Affected: Go: github.com/grafana/grafana

Grafana is an open-source platform for monitoring and observability. The vulnerability impacts instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations.

It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally.

This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user.

The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.

 https://cve.radiocsirt.org/vuln/gsd-2023-4822 gsd-2023-4822 2026-10-06T08:19:49.701891+00:00 gsd-2023-4822 https://cve.radiocsirt.org/vuln/rhsa-2024:3925 RHSA-2024:3925 — Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, enhancements, and bug fix update 2026-10-06T08:19:49.701903+00:00

grafana: account takeover possible when using Azure AD OAuth grafana: incorrect assessment of permissions across organizations go-git: Maliciously crafted Git server replies can cause DoS on go-git clients go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-4822 UBUNTU-CVE-2023-4822 2026-10-06T08:19:49.701928+00:00

Affected: Ubuntu:16.04:LTS: grafana

Grafana is an open-source platform for monitoring and observability. The vulnerability impacts Grafana instances with several organizations, and allows a user with Organization Admin permissions in one organization to change the permissions associated with Organization Viewer, Organization Editor and Organization Admin roles in all organizations. It also allows an Organization Admin to assign or revoke any permissions that they have to any user globally. This means that any Organization Admin can elevate their own permissions in any organization that they are already a member of, or elevate or restrict the permissions of any other user. The vulnerability does not allow a user to become a member of an organization that they are not already a member of, or to add any other users to an organization that the current user is not a member of.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2646 WID-SEC-W-2023-2646 — Grafana: Schwachstelle ermöglicht Privilegieneskalation 2026-10-06T08:19:49.701950+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um seine Privilegien zu erhöhen.