Oracle Linux 10 : grafana (ELSA-2026-54178)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54178 advisory. - Resolves RHEL-211020: CVE-2026-33377 - Resolves RHEL-211376: CVE-2026-8609 - Resolves RHEL-210981: CVE-2026-33376 - Resolves RHEL-211389:...

grafana security, bug fix, and enhancement update

10.2.6-28.4 - Resolves RHEL-211020: CVE-2026-33377 10.2.6-28.3 - Resolves RHEL-211376: CVE-2026-8609 10.2.6-28.2 - Resolves RHEL-210981: CVE-2026-33376 10.2.6-28.1 - Resolves RHEL-211389: CVE-2026-33382 10.2.6-28 - Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build...

ALSA-2026:54178 Moderate: grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Privilege escalation via dashboard overwrite CVE-2026-33377 grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default...

CVE-2026-33376 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2026-33376 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

CVE-2026-33376

When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. Addresses specifying a mask explicitly are not affected; to mitigate easily, add the desired mask usually /128 to the addresses. Only auth proxy is affected; Okta, SAML, LDAP, etc are unaffected here...