https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:51:23.591980+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07792 bdu:2026-07792 2026-10-17T15:51:23.596459+00:00 bdu:2026-07792 https://cve.radiocsirt.org/vuln/bit-grafana-2026-21724 BIT-grafana-2026-21724 — Missing Protected-field Authorization in Provisioning Contact Points API 2026-10-17T15:51:23.596493+00:00

Affected: Bitnami: grafana

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

 https://cve.radiocsirt.org/vuln/euvd-2026-360193 EUVD-2026-360193 2026-10-17T15:51:23.596527+00:00 EUVD-2026-360193 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21724 fkie_cve-2026-21724 2026-10-17T15:51:23.596540+00:00

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

 https://cve.radiocsirt.org/vuln/ghsa-7g92-g4vh-hp84 GHSA-7g92-g4vh-hp84 — Grafana OSS: Authorization bypass allows users with Editor role to modify protected webhook URLs without permissions 2026-10-17T15:51:23.596561+00:00

Affected: Go: github.com/grafana/grafana

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

A patched version is available at https://github.com/grafana/grafana/releases/tag/v12.3.6.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-21724 UBUNTU-CVE-2026-21724 2026-10-17T15:51:23.596583+00:00

Affected: Ubuntu:16.04:LTS: grafana

A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0886 WID-SEC-W-2026-0886 — Grafana: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und DoS 2026-10-17T15:51:23.596601+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um Dateien zu manipulieren oder um einen Denial-of-Service-Zustand herbeizuführen.