https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:54:20.160047+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-360201 EUVD-2026-360201 2026-10-06T05:54:20.206765+00:00 EUVD-2026-360201 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15583 fkie_cve-2026-15583 2026-10-06T05:54:20.206802+00:00

A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud metadata endpoints.

 https://cve.radiocsirt.org/vuln/ghsa-7cfp-pmw3-4j7r GHSA-7cfp-pmw3-4j7r 2026-10-06T05:54:20.206836+00:00

A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud metadata endpoints.