CVE-2026-76154

A flaw was found in Grafana. A user with an Editor role can exploit a stored cross-site scripting XSS vulnerability in the Geomap panel. This occurs because the Geomap panel loads map styles from a URL and inserts the style's attribution field into the page without proper sanitization. By...