https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 22:17:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-12740 bdu:2025-12740 https://cve.radiocsirt.org/vuln/bdu:2025-12740 https://cve.radiocsirt.org/vuln/euvd-2026-271972 EUVD-2026-271972 https://cve.radiocsirt.org/vuln/euvd-2026-271972 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11539 <p>Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then loaded by the Chromium process.</p> <p>Instances are vulnerable if:</p> <p>1. The default token (&#34;authToken&#34;) is not changed, or is known to the attacker. 2. The attacker can reach the image renderer endpoint. This issue affects grafana-image-renderer: from 1.0.0 through 4.0.16.</p> <p>Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then loaded by the Chromium process.</p> <p>Instances are vulnerable if:</p> <p>1. The default token (&#34;authToken&#34;) is not changed, or is known to the attacker. 2. The attacker can reach the image renderer endpoint. This issue affects grafana-image-renderer: from 1.0.0 through 4.0.16.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11539 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2245 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle im Grafana Image Renderer Plugin ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle im Grafana Image Renderer Plugin ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2245