Vulnerabilidades en grafana
141 resultadosCVE-2026-27879MEDIUMQuery resampling can cause unbounded memory allocationsEPSS 0.4%CVE-2026-33382HIGHDenial of service via unbounded request body sizeEPSS 0.4%CVE-2026-88858MEDIUMServer-side expression parser denial of serviceEPSS 0.4%CVE-2026-81841MEDIUMPaused shared dashboard access tokens still expose data source configurationEPSS 0.4%CVE-2026-89039MEDIUMArbitrary file read via the convert_playwright_script prompt in mcp-k6EPSS 0.4%CVE-2026-95502MEDIUMGit Sync memory exhaustion via a malicious Git serverEPSS 0.4%CVE-2026-33374MEDIUMUnbounded memory allocation in the Prometheus rule conversion APIEPSS 0.4%CVE-2026-33380MEDIUMSQL Expressions Read File From DiskEPSS 0.4%CVE-2026-11769MEDIUMOperator - Namespaced User Path TraversalEPSS 0.4%CVE-2026-21722MEDIUMPublic Dashboards time range restriction on annotations can be bypassedEPSS 0.4%CVE-2025-10630MEDIUMRegex DoS in Grafana Zabbix PluginEPSS 0.4%CVE-2025-8341MEDIUMSSRF in Infinity Datasource PluginEPSS 0.4%CVE-2026-76154HIGHCVE-2026-76154 CVE RecordEPSS 0.4%CVE-2026-11817MEDIUMCVE-2026-11817 CVE RecordEPSS 0.4%CVE-2026-28381CRITICALLocal File Read/Write to Potential Privilege Escalation via Snowflake GET/PUTEPSS 0.4%CVE-2026-33381MEDIUMUsers can generate Service Account tokens after permissions removalEPSS 0.3%CVE-2026-92539MEDIUMCross-organization user modification and deletion via the SCIM API in Grafana EnterpriseEPSS 0.3%CVE-2026-28383MEDIUMGrafana plugin resources can lead to unbounded memory allocationEPSS 0.3%CVE-2026-28376MEDIUMGrafana Live push endpoint allows unbounded memory allocation leading to OOMEPSS 0.3%CVE-2026-33378MEDIUMGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup MacroEPSS 0.3%