Lucene search
+L

12 matches found

Wolfi
Wolfi
added 2026/08/14 8:23 a.m.18 views

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: prometheus, grafana-alloy, goreleaser, k8sgpt, terragrunt, cri-tools, minio, k3s, vcluster, malcontent, dagger, teleport, witness, maru, mcp-grafana, dgraph, eksctl, weaviate, ollama, rclone, tempo, gitlab-runner, nuclei, redpanda, datadog-agent,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/14 8:23 a.m.20 views

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: minio, telegraf, aws-otel-collector, istio, mcp-grafana, grafana-pyroscope, certificate-transparency, tempo, cloud-sql-proxy, jaeger, datadog-agent, minio-operator, keda, loki, mc, karma, trillian, splunk-otel-collector, prometheus-pushgateway, minio-object-browser...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/08/11 6:17 a.m.14 views

CVE-2026-19516

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

9.1CVSS0.0024EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/11 5:28 a.m.9 views

CVE-2026-19516

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

9.1CVSS5.2AI score0.0024EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/11 5:28 a.m.25 views

EUVD-2026-55938

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

9.1CVSS5.3AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 5:28 a.m.174 views

CVE-2026-19516

The CVE describes SSRF in Grafana’s mcp-grafana outbound requests: a caller-supplied X-Grafana-URL header plus grafana_api_request can set HTTP method, path, and body, enabling directing requests to internal, loopback, and link-local services (including metadata endpoints) beyond the configured G...

9.1CVSS5.3AI score0.0024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 5:28 a.m.28 views

CVE-2026-19516 CVE-2026-19516 CVE Record

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

9.1CVSS0.0024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/11 5:28 a.m.9 views

CVE-2026-19516 CVE-2026-19516 CVE Record

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...

9.1CVSS5.2AI score0.0024EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.7 views

PT-2026-70062

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana api request tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can dire...

9.1CVSS5.2AI score0.00529EPSS
SaveExploits1References4
Wolfi
Wolfi
added 2026/05/14 7:48 p.m.29 views

CVE-2026-44903 vulnerabilities

Vulnerabilities for packages: k8sgpt, minio, metrics-server, telegraf, aws-otel-collector, fluent-bit-plugin-loki, istio, mcp-grafana, amazon-cloudwatch-agent-operator, certificate-transparency, tempo, cloud-sql-proxy, jaeger, node-problem-detector, datadog-agent, minio-operator, keda,...

6.1CVSS7.2AI score0.00204EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/05/06 7:17 p.m.30 views

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: minio-operator-fips, minio, elastic-agent, agentbeat-fips, metrics-server-fips, datadog-agent, fluent-bit-plugin-loki, amazon-cloudwatch-agent-operator-fips, beats-fips, minio-operator, splunk-otel-collector, prometheus-pushgateway, mcp-grafana-fips, ops-agent, mc,...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2026/03/31 1:48 p.m.22 views

CVE-2026-32285 vulnerabilities

Vulnerabilities for packages: prometheus, grafana-alloy, goreleaser, k8sgpt, terragrunt, cri-tools, minio, k3s, vcluster, malcontent, dagger, teleport, witness, maru, mcp-grafana, dgraph, eksctl, weaviate, ollama, rclone, tempo, gitlab-runner, nuclei, redpanda, datadog-agent,...

7.5CVSS6.8AI score0.0075EPSS
SaveExploits1
Rows per page
Query Builder