MiracleLinux 9 : grafana-10.2.6-23.el9_8.7 (AXSA:2026-2189:34)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2189:34 advisory. grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/http: golang: golang: Denial of Service via crafted HT...

RLSA-2026:89732 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit...

grafana security update

An update is available for grafana. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor f...

RockyLinux 10 : grafana (RLSA-2026:89732)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89732 advisory. grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/textproto: mime/multipart: golang: golang: Denial of...

grafana: Grafana: Information disclosure vulnerability in Unified Alerting

A flaw was found in Grafana's Unified Alerting component. An authenticated user with permissions to create or edit alert rules in a folder can bypass datasource query permissions. By manipulating the queryType field, an attacker can execute queries against datasources they are not authorized to...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

grafana: Grafana: Information disclosure vulnerability in Unified Alerting

A flaw was found in Grafana's Unified Alerting component. An authenticated user with permissions to create or edit alert rules in a folder can bypass datasource query permissions. By manipulating the queryType field, an attacker can execute queries against datasources they are not authorized to...

grafana security update

10.2.6-23.7 - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting - Resolves RHEL-290771 10.2.6-23.6 - Rebuild against updated golang - Resolves RHEL-287510 - Resolves RHEL-279380 - Resolves RHEL-279012 - Resolves RHEL-278733 10.2.6-23.5 - Resolves RHEL-25315...

grafana security update

10.2.6-28.9 - Rebuild against updated golang - Resolves RHEL-290737 10.2.6-28.9 - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting in Unified Alerting - Resolves RHEL-290765 10.2.6-28.8 - Rebuild against updated golang - Resolves RHEL-287475 - Resolves...

ALSA-2026:89732 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit...

RHEL 10 : grafana (RHSA-2026:89732)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:89732 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana:...

Oracle Linux 10 : grafana (ELSA-2026-89732)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89732 advisory. - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting in Unified Alerting - Resolves RHEL-253142: CVE-2026-1581...

ALSA-2026:89744 Critical: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Critical: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Grafana: Information disclosure vulnerability in Unified Alerting CVE-2026-17183 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Oracle Linux 9 : grafana (ELSA-2026-89744)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89744 advisory. - CVE-2026-17183 grafana: Grafana: Information disclosure vulnerability in Unified Alerting - Resolves RHEL-253159: CVE-2026-15815 - CVE-2026-42504...

CVE-2026-17183

A flaw was found in Grafana's Unified Alerting component. An authenticated user with permissions to create or edit alert rules in a folder can bypass datasource query permissions. By manipulating the queryType field, an attacker can execute queries against datasources they are not authorized to...

grafana: Grafana: Information disclosure vulnerability in Unified Alerting

A flaw was found in Grafana's Unified Alerting component. An authenticated user with permissions to create or edit alert rules in a folder can bypass datasource query permissions. By manipulating the queryType field, an attacker can execute queries against datasources they are not authorized to...

grafana: Grafana: Information disclosure vulnerability in Unified Alerting

A flaw was found in Grafana's Unified Alerting component. An authenticated user with permissions to create or edit alert rules in a folder can bypass datasource query permissions. By manipulating the queryType field, an attacker can execute queries against datasources they are not authorized to...

grafana: Grafana: Information disclosure vulnerability in Unified Alerting

A flaw was found in Grafana's Unified Alerting component. An authenticated user with permissions to create or edit alert rules in a folder can bypass datasource query permissions. By manipulating the queryType field, an attacker can execute queries against datasources they are not authorized to...

Linux Distros Unpatched Vulnerability : CVE-2022-31097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. Versions on the 8.x and 9.x branch prior to 9.0.3, 8.5.9, 8.4.10, and 8.3.10 are vulnerable...