Lucene search
+L

CVE-2024-9264

🗓️ 24 Aug 2026 11:51:57Reported by KitPloitType 
kitploit
 kitploit
🔗 kitploit.com👁 1 Views

Authenticated RCE in Grafana v11.0 via SQL Expressions passing unsanitized SQL to DuckDB CLI.

Related
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Code Injection in Grafana
15 Jun 202500:38
githubexploit
githubexploit
GithubExploit
Exploit for Code Injection in Grafana
31 May 202520:06
githubexploit
githubexploit
GithubExploit
Exploit for Command Injection in Grafana
9 Feb 202614:30
githubexploit
githubexploit
GithubExploit
Exploit for Code Injection in Grafana
5 Jul 202523:51
githubexploit
githubexploit
GithubExploit
Exploit for Code Injection in Grafana
5 Jul 202514:03
githubexploit
githubexploit
GithubExploit
Exploit for Code Injection in Grafana
29 Jun 202606:44
githubexploit
githubexploit
GithubExploit
Exploit for Code Injection in Grafana
19 Oct 202413:50
githubexploit
githubexploit
GithubExploit
Exploit for Code Injection in Grafana
21 Oct 202403:36
githubexploit
githubexploit
GithubExploit
Exploit for Code Injection in Grafana
20 Oct 202401:13
githubexploit
githubexploit
GithubExploit
Exploit for Command Injection in Grafana
22 Jul 202615:33
githubexploit
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Aug 2026 11:51Current
CVSS 3.18.8 - 9.9
CVSS 49.4
EPSS0.94644
SSVC
1