18660 matches found
UBUNTU-CVE-2026-17183
An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...
CVE-2026-17183
An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...
CVE-2026-60766
creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:34+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70949
creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 07:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu2dnkv4652v...
CVE-2026-71117
creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:13+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71106
creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:36+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70965
creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:09+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 06:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu26mndmym24...
CVE-2026-70877
creationtimestamp| type| source ---|---|--- 2026-08-19 17:46:29+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 10:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu2lzs4exh2h...
CVE-2026-70891
creationtimestamp| type| source ---|---|--- 2026-08-19 17:45:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-17183 CVE-2026-17183 CVE Record
An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...
EUVD-2026-62597
An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...
CVE-2026-17183 CVE-2026-17183 CVE Record
An authenticated user with permission to create or edit alert rules can bypass datasource query authorization by marking an alert rule query as a server-side expression while referencing a real datasource UID incorrect authorization. This can expose data accessible through Grafana's configured...
CVE-2026-17183
In Grafana OSS (confirmed 13.0.1), the Unified Alerting/ngalert component skips datasource authorization when queryType equals __expr__, but execution uses the real datasourceUid. An authenticated low-privileged user can set queryType: "__expr__" with a real datasource UID to bypass datasources:q...
CVE-2026-61040
creationtimestamp| type| source ---|---|--- 2026-08-19 17:22:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 02:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtppdsu5b22f...
CVE-2026-61291
creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:51+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-73886
creationtimestamp| type| source ---|---|--- 2026-08-19 17:19:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-73882
creationtimestamp| type| source ---|---|--- 2026-08-19 17:19:23+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-61231
creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtplyjd3a62y...