agentprime: grafana-enterpriseEvery new CVE for grafana-enterprise.https://agentprime.io/CVE-2026-79656: OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectorshttps://agentprime.io/advisories/CVE-2026-79656/https://agentprime.io/advisories/CVE-2026-79656/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:23:44 GMTCVECVE-2026-103506: SSO settings authorization bypasshttps://agentprime.io/advisories/CVE-2026-103506/https://agentprime.io/advisories/CVE-2026-103506/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:50:30 GMTCVECVE-2026-88858: Server-side expression parser denial of servicehttps://agentprime.io/advisories/CVE-2026-88858/https://agentprime.io/advisories/CVE-2026-88858/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:50:17 GMTCVECVE-2026-88967: Azure Monitor access token disclosure via SSRFhttps://agentprime.io/advisories/CVE-2026-88967/https://agentprime.io/advisories/CVE-2026-88967/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:49:57 GMTCVECVE-2026-100105: Alerting contact point authorization bypass via schema downgradehttps://agentprime.io/advisories/CVE-2026-100105/https://agentprime.io/advisories/CVE-2026-100105/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:48:58 GMTCVECVE-2026-16491: CVE-2026-16491 CVE Recordhttps://agentprime.io/advisories/CVE-2026-16491/https://agentprime.io/advisories/CVE-2026-16491/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:21:38 GMTCVECVE-2026-92539: Cross-organization user modification and deletion via the SCIM API in Grafana Enterprisehttps://agentprime.io/advisories/CVE-2026-92539/https://agentprime.io/advisories/CVE-2026-92539/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 16:55:17 GMTCVECVE-2026-9703: Viewer role can create, modify and delete Loki alerting ruleshttps://agentprime.io/advisories/CVE-2026-9703/https://agentprime.io/advisories/CVE-2026-9703/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 14:02:00 GMTCVECVE-2026-33374: Unbounded memory allocation in the Prometheus rule conversion APIhttps://agentprime.io/advisories/CVE-2026-33374/https://agentprime.io/advisories/CVE-2026-33374/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:05:49 GMTCVECVE-2026-15577: Git Sync connection configuration can be modified with read-only accesshttps://agentprime.io/advisories/CVE-2026-15577/https://agentprime.io/advisories/CVE-2026-15577/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:05:49 GMTCVECVE-2026-93294: Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIshttps://agentprime.io/advisories/CVE-2026-93294/https://agentprime.io/advisories/CVE-2026-93294/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:05:49 GMTCVECVE-2026-95502: Git Sync memory exhaustion via a malicious Git serverhttps://agentprime.io/advisories/CVE-2026-95502/https://agentprime.io/advisories/CVE-2026-95502/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:05:49 GMTCVECVE-2026-13720: Editor can forge file-provisioning provenance on dashboards via the dashboard APIhttps://agentprime.io/advisories/CVE-2026-13720/https://agentprime.io/advisories/CVE-2026-13720/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 11:06:38 GMTCVECVE-2026-13719: Alert rules in restricted folders disclosed via the alert rules list APIhttps://agentprime.io/advisories/CVE-2026-13719/https://agentprime.io/advisories/CVE-2026-13719/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 11:06:38 GMTCVECVE-2026-81842: Library panel can be moved into a folder without library panel create permissionhttps://agentprime.io/advisories/CVE-2026-81842/https://agentprime.io/advisories/CVE-2026-81842/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 20:50:01 GMTCVECVE-2026-81841: Paused shared dashboard access tokens still expose data source configurationhttps://agentprime.io/advisories/CVE-2026-81841/https://agentprime.io/advisories/CVE-2026-81841/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 20:35:57 GMTCVECVE-2026-15815: CVE-2026-15815 CVE Recordhttps://agentprime.io/advisories/CVE-2026-15815/https://agentprime.io/advisories/CVE-2026-15815/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 20:47:01 GMTCVECVE-2026-76154: CVE-2026-76154 CVE Recordhttps://agentprime.io/advisories/CVE-2026-76154/https://agentprime.io/advisories/CVE-2026-76154/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 20:22:55 GMTCVECVE-2026-14199: Session takeover via Auth Proxy cache key collisionhttps://agentprime.io/advisories/CVE-2026-14199/https://agentprime.io/advisories/CVE-2026-14199/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 16:06:28 GMTCVECVE-2026-12704: SAML assertion replay via skipped InResponseTo validationhttps://agentprime.io/advisories/CVE-2026-12704/https://agentprime.io/advisories/CVE-2026-12704/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 16:05:42 GMTCVECVE-2026-19197: Broken access control in dashboard snapshotshttps://agentprime.io/advisories/CVE-2026-19197/https://agentprime.io/advisories/CVE-2026-19197/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 08:50:27 GMTCVECVE-2026-17183: CVE-2026-17183 CVE Recordhttps://agentprime.io/advisories/CVE-2026-17183/https://agentprime.io/advisories/CVE-2026-17183/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 17:30:06 GMTCVECVE-2026-11817: CVE-2026-11817 CVE Recordhttps://agentprime.io/advisories/CVE-2026-11817/https://agentprime.io/advisories/CVE-2026-11817/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 21:28:17 GMTCVECVE-2026-28378: Cross-Organization Public Dashboard Deletion via Missing Org Isolationhttps://agentprime.io/advisories/CVE-2026-28378/https://agentprime.io/advisories/CVE-2026-28378/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 21:08:04 GMTCVECVE-2025-2703: Cross-site scripting in Grafana and othershttps://agentprime.io/advisories/CVE-2025-2703/https://agentprime.io/advisories/CVE-2025-2703/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Apr 2025 11:36:02 GMTCVECVE-2023-4399: Grafana is an open-source platform for monitoring and observability.https://agentprime.io/advisories/CVE-2023-4399/https://agentprime.io/advisories/CVE-2023-4399/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Oct 2023 07:09:03 GMTCVECVE-2023-1387: Information disclosure in Grafana and othershttps://agentprime.io/advisories/CVE-2023-1387/https://agentprime.io/advisories/CVE-2023-1387/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Apr 2023 13:47:16 GMTCVE