Vulnerabilidades em grafana

141 resultados
Análise Vexday

Grafana apresenta 30 vulnerabilidades catalogadas, das quais 2 estão sob ataque ativo e 3 são críticas, configurando risco material para ambientes em produção. A fraqueza dominante é exposição de informações (CWE-200), típica de produtos web, embora nenhuma vulnerabilidade tenha sido publicada nos últimos 90 dias, sugerindo que o risco atual é estável e não inclui ameaças zero-day recentes.

CVE-2026-14199HIGHSession takeover via Auth Proxy cache key collisionEPSS 0.3%CVE-2026-27877MEDIUMPublic dashboards discloses all direct mode datasourcesEPSS 0.3%CVE-2026-19516CRITICALCVE-2026-19516 CVE RecordEPSS 0.3%CVE-2024-6322MEDIUMAccess control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account EPSS 0.3%CVE-2024-8975HIGHGrafana Alloy on Windows Unquoted service pathEPSS 0.3%CVE-2026-12704MEDIUMSAML assertion replay via skipped InResponseTo validationEPSS 0.3%CVE-2026-100105HIGHAlerting contact point authorization bypass via schema downgradeEPSS 0.3%CVE-2026-88967HIGHAzure Monitor access token disclosure via SSRFEPSS 0.3%CVE-2026-16491MEDIUMCVE-2026-16491 CVE RecordEPSS 0.3%CVE-2026-10601MEDIUMPath traversal in the Tempo and Loki data source pluginsEPSS 0.3%CVE-2026-17183HIGHCVE-2026-17183 CVE RecordEPSS 0.3%CVE-2026-33376HIGHAuth Proxy IPv6 whitelist bypassEPSS 0.3%CVE-2022-31123MEDIUMGrafana plugin signature bypass vulnerabilityEPSS 0.3%CVE-2026-21724MEDIUMMissing Protected-field Authorization in Provisioning Contact Points APIEPSS 0.3%CVE-2026-103506HIGHSSO settings authorization bypassEPSS 0.3%CVE-2026-15577MEDIUMGit Sync connection configuration can be modified with read-only accessEPSS 0.3%CVE-2025-41117MEDIUMXSS in Grafana Explore stack traceEPSS 0.3%CVE-2026-93294MEDIUMAzure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIsEPSS 0.3%CVE-2024-8996HIGHGrafana Agent Flow on Windows Unquoted service pathEPSS 0.3%CVE-2026-28379MEDIUMViewer-triggered race condition in Grafana Live leads to complete server crashEPSS 0.3%