CVE-2026-88967

A flaw was found in Grafana. This information disclosure vulnerability allows an authenticated user with permission to query an Azure Monitor data source, including a user with the Viewer role, to cause Grafana to send the data source's Azure access token to an arbitrary destination. An attacker...

CVE-2026-88967

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token server-side request forgery...

EUVD-2026-112193

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token server-side request forgery...

CVE-2026-88967

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token server-side request forgery...

CVE-2026-88967 Azure Monitor access token disclosure via SSRF

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token server-side request forgery...

CVE-2026-88967

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token server-side request forgery...

CVE-2026-88967

A Server-Side Request Forgery (SSRF) vulnerability in Grafana allows a user with query access to an Azure Monitor data source to trigger server-side requests to an attacker-controlled endpoint. This can result in the disclosure of the data source's Azure access token . The vulnerability is addres...

CVE-2026-88967: Grafana: A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an…

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token server-side request forgery...

Azure Monitor access token disclosure via SSRF

A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token server-side request forgery...

azure-core-tracing-opentelemetry (1.0.0b6), opentelemetry-azure-monitor (0.4.0b0) +3 more potentially affected by CVE-2026-114603 via opentelemetry-api (0.10.0b0)

opentelemetry-api PYPI version 0.10.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on opentelemetry-api and may be impacted: - azure-core-tracing-opentelemetry 1.0.0b6 - opentelemetry-azure-monitor 0.4.0b0 - opentelemetry-instrumentation 0.10.0b0 -...

grafana: Grafana: Information disclosure via Azure Monitor resource proxy

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

Linux Distros Unpatched Vulnerability : CVE-2026-93294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the dat...

BIT-GRAFANA-2026-93294 Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

grafana: Grafana: Information disclosure via Azure Monitor resource proxy

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

grafana: Grafana: Information disclosure via Azure Monitor resource proxy

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

SUSE CVE-2026-93294

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

CVE-2026-93294

A flaw was found in Grafana. An authenticated user with query access to an Azure Monitor data source can misuse its resource proxy to send unauthorized requests to Azure Resource Manager Application Programming Interfaces APIs using the data source's configured cloud identity. This unintended...

CVE-2026-93294

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

EUVD-2026-98903

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...

CVE-2026-93294 Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...