Lucene search
+L

grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default

🗓️ 24 Aug 2026 15:24:43Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 4 Views

Grafana Auth Proxy defaults IPv6 allow-list to /32 instead of /128 enabling unauthorized access.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2026-33376
13 May 202619:28
attackerkb
alpinelinux
AlpineLinux
CVE-2026-33376
13 May 202619:28
alpinelinux
bdu_fstec
BDU FSTEC
The vulnerability of the Auth Proxy function on the Grafana monitoring and observation platform allows a hacker to bypass security restrictions.
19 May 202600:00
bdu_fstec
cgr
Chainguard
CVE-2026-33376 vulnerabilities
30 May 202601:18
cgr
cnnvd
CNNVD
Grafana OSS 安全漏洞
13 May 202600:00
cnnvd
cve
CVE
CVE-2026-33376
13 May 202619:28
cve
cvelist
Cvelist
CVE-2026-33376 Auth Proxy IPv6 whitelist bypass
13 May 202619:28
cvelist
oraclelinux
Oracle linux
grafana security, bug fix, and enhancement update
12 Aug 202600:00
oraclelinux
euvd
EUVD
EUVD-2026-30142
13 May 202621:32
euvd
grafana
Grafana
Auth Proxy IPv6 whitelist bypass
13 May 202600:00
grafana
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux9.8aarch64grafana10.2.6-23.el9_8.2grafana-10.2.6-23.el9_8.2.aarch64.rpm
Red Hat Enterprise Linux9.8ppc64legrafana10.2.6-23.el9_8.2grafana-10.2.6-23.el9_8.2.ppc64le.rpm
Red Hat Enterprise Linux9.8s390xgrafana10.2.6-23.el9_8.2grafana-10.2.6-23.el9_8.2.s390x.rpm
Red Hat Enterprise Linux9.8x86_64grafana10.2.6-23.el9_8.2grafana-10.2.6-23.el9_8.2.x86_64.rpm
Red Hat Enterprise Linux9.8aarch64grafana-debuginfo10.2.6-23.el9_8.2grafana-debuginfo-10.2.6-23.el9_8.2.aarch64.rpm
Red Hat Enterprise Linux9.8ppc64legrafana-debuginfo10.2.6-23.el9_8.2grafana-debuginfo-10.2.6-23.el9_8.2.ppc64le.rpm
Red Hat Enterprise Linux9.8s390xgrafana-debuginfo10.2.6-23.el9_8.2grafana-debuginfo-10.2.6-23.el9_8.2.s390x.rpm
Red Hat Enterprise Linux9.8x86_64grafana-debuginfo10.2.6-23.el9_8.2grafana-debuginfo-10.2.6-23.el9_8.2.x86_64.rpm
Red Hat Enterprise Linux9.8aarch64grafana-debugsource10.2.6-23.el9_8.2grafana-debugsource-10.2.6-23.el9_8.2.aarch64.rpm
Red Hat Enterprise Linux9.8ppc64legrafana-debugsource10.2.6-23.el9_8.2grafana-debugsource-10.2.6-23.el9_8.2.ppc64le.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Aug 2026 20:36Current
5.4Medium risk
Vulners AI Score5.4
CVSS 3.17.4
EPSS0.00282
SSVC
4