CVE-2026-19475

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-77009

creationtimestamp| type| source ---|---|--- 2026-09-02 16:07:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mukcybx7hl2o 2026-09-02 18:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukkwpstlq2o...

CVE-2024-4254

creationtimestamp| type| source ---|---|--- 2026-09-02 16:00:04+00:00| seen| Telegram/s3zjyT-FT6tCC8Ykb-K7GeZvSlBBM3ljM38r7xtE1exsPM 2026-09-03 00:00:41+00:00| published-proof-of-concept| Telegram/s3zjyT-FT6tCC8Ykb-K7GeZvSlBBM3ljM38r7xtE1exsPM...

CVE-2026-19475

Grafana is vulnerable to a denial of service via a bypass of the fix for CVE-2026-33375 . An authenticated user with permission to query a SQL data source can inject the timeGroup macro through a WHERE clause , which Grafana's regex-based macro parsing does not reject. Evaluating the injected mac...

CVE-2026-19475 SQL Data Source Plugin: OOM DoS via $__timeGroup macro

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-19475

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-78594

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78410

util-linux is affected by a flaw in how restricted bind mounts are handled. The source path taken from /etc/fstab is not pinned before the privileged mount(8) call, allowing a local unprivileged user who can replace the authorized source or a writable ancestor to redirect the SUID mount to bind a...

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

EUVD-2026-70058

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594

Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...

CVE-2026-81294

creationtimestamp| type| source ---|---|--- 2026-09-02 14:07:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muk4arpeqd2m 2026-09-02 18:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mukkeu2ptn2t 2026-09-22 07:00:08+00:00| seen|...

GHSA-J8PM-GJ4C-RQ4X

creationtimestamp| type| source ---|---|--- 2026-09-02 12:33:24+00:00| seen| https://gist.github.com/alon710/d11eade9d3460fb762a1734567ffc610...

CVE-2026-14199

creationtimestamp| type| source ---|---|--- 2026-09-02 12:23:23+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mujwgyfnd422...

CVE-2023-54354

creationtimestamp| type| source ---|---|--- 2026-09-02 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujvjw5r4t2b...

CVE-2026-79770

creationtimestamp| type| source ---|---|--- 2026-09-02 11:07:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujs6ls7yz2r...

CVE-2026-14828

creationtimestamp| type| source ---|---|--- 2026-09-02 11:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mujrtja3uj2y 2026-09-02 11:10:23+00:00| seen| https://bsky.app/profile/potato.software/post/3mujsehavzj2v...