https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 15:51:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07792 bdu:2026-07792 https://cve.radiocsirt.org/vuln/bdu:2026-07792 https://cve.radiocsirt.org/vuln/bit-grafana-2026-21724 <p><strong>Affected:</strong> Bitnami: grafana</p> <p>A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.</p> <p><strong>Affected:</strong> Bitnami: grafana</p> <p>A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.</p> https://cve.radiocsirt.org/vuln/bit-grafana-2026-21724 https://cve.radiocsirt.org/vuln/euvd-2026-360193 EUVD-2026-360193 https://cve.radiocsirt.org/vuln/euvd-2026-360193 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21724 <p>A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.</p> <p>A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-21724 https://cve.radiocsirt.org/vuln/ghsa-7g92-g4vh-hp84 <p><strong>Affected:</strong> Go: github.com/grafana/grafana</p> <p>A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.</p> <p>A patched version is available at https://github.com/grafana/grafana/releases/tag/v12.3.6.</p> <p><strong>Affected:</strong> Go: github.com/grafana/grafana</p> <p>A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.</p> <p>A patched version is available at https://github.com/grafana/grafana/releases/tag/v12.3.6.</p> https://cve.radiocsirt.org/vuln/ghsa-7g92-g4vh-hp84 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-21724 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: grafana</p> <p>A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-21724 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0886 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um Dateien zu manipulieren oder um einen Denial-of-Service-Zustand herbeizuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um Dateien zu manipulieren oder um einen Denial-of-Service-Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0886