agentprime: grafana-ossEvery new CVE for grafana-oss.https://agentprime.io/CVE-2026-79656: OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectorshttps://agentprime.io/advisories/CVE-2026-79656/https://agentprime.io/advisories/CVE-2026-79656/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:23:44 GMTCVECVE-2026-103506: SSO settings authorization bypasshttps://agentprime.io/advisories/CVE-2026-103506/https://agentprime.io/advisories/CVE-2026-103506/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:50:30 GMTCVECVE-2026-88858: Server-side expression parser denial of servicehttps://agentprime.io/advisories/CVE-2026-88858/https://agentprime.io/advisories/CVE-2026-88858/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:50:17 GMTCVECVE-2026-88967: Azure Monitor access token disclosure via SSRFhttps://agentprime.io/advisories/CVE-2026-88967/https://agentprime.io/advisories/CVE-2026-88967/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:49:57 GMTCVECVE-2026-100105: Alerting contact point authorization bypass via schema downgradehttps://agentprime.io/advisories/CVE-2026-100105/https://agentprime.io/advisories/CVE-2026-100105/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 16:48:58 GMTCVECVE-2026-16491: CVE-2026-16491 CVE Recordhttps://agentprime.io/advisories/CVE-2026-16491/https://agentprime.io/advisories/CVE-2026-16491/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:21:38 GMTCVECVE-2026-9703: Viewer role can create, modify and delete Loki alerting ruleshttps://agentprime.io/advisories/CVE-2026-9703/https://agentprime.io/advisories/CVE-2026-9703/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 14:02:00 GMTCVECVE-2026-33374: Unbounded memory allocation in the Prometheus rule conversion APIhttps://agentprime.io/advisories/CVE-2026-33374/https://agentprime.io/advisories/CVE-2026-33374/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:05:49 GMTCVECVE-2026-15577: Git Sync connection configuration can be modified with read-only accesshttps://agentprime.io/advisories/CVE-2026-15577/https://agentprime.io/advisories/CVE-2026-15577/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:05:49 GMTCVECVE-2026-93294: Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIshttps://agentprime.io/advisories/CVE-2026-93294/https://agentprime.io/advisories/CVE-2026-93294/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:05:49 GMTCVECVE-2026-95502: Git Sync memory exhaustion via a malicious Git serverhttps://agentprime.io/advisories/CVE-2026-95502/https://agentprime.io/advisories/CVE-2026-95502/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 17:05:49 GMTCVECVE-2026-13720: Editor can forge file-provisioning provenance on dashboards via the dashboard APIhttps://agentprime.io/advisories/CVE-2026-13720/https://agentprime.io/advisories/CVE-2026-13720/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 11:06:38 GMTCVECVE-2026-13719: Alert rules in restricted folders disclosed via the alert rules list APIhttps://agentprime.io/advisories/CVE-2026-13719/https://agentprime.io/advisories/CVE-2026-13719/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 11:06:38 GMTCVECVE-2026-81842: Library panel can be moved into a folder without library panel create permissionhttps://agentprime.io/advisories/CVE-2026-81842/https://agentprime.io/advisories/CVE-2026-81842/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 20:50:01 GMTCVECVE-2026-81841: Paused shared dashboard access tokens still expose data source configurationhttps://agentprime.io/advisories/CVE-2026-81841/https://agentprime.io/advisories/CVE-2026-81841/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 20:35:57 GMTCVECVE-2026-15815: CVE-2026-15815 CVE Recordhttps://agentprime.io/advisories/CVE-2026-15815/https://agentprime.io/advisories/CVE-2026-15815/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 20:47:01 GMTCVECVE-2026-76154: CVE-2026-76154 CVE Recordhttps://agentprime.io/advisories/CVE-2026-76154/https://agentprime.io/advisories/CVE-2026-76154/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 20:22:55 GMTCVECVE-2026-14199: Session takeover via Auth Proxy cache key collisionhttps://agentprime.io/advisories/CVE-2026-14199/https://agentprime.io/advisories/CVE-2026-14199/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 16:06:28 GMTCVECVE-2026-19475: SQL Data Source Plugin: OOM DoS via $__timeGroup macrohttps://agentprime.io/advisories/CVE-2026-19475/https://agentprime.io/advisories/CVE-2026-19475/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 15:56:33 GMTCVECVE-2026-19197: Broken access control in dashboard snapshotshttps://agentprime.io/advisories/CVE-2026-19197/https://agentprime.io/advisories/CVE-2026-19197/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 08:50:27 GMTCVECVE-2026-17033: CVE-2026-17033 CVE Recordhttps://agentprime.io/advisories/CVE-2026-17033/https://agentprime.io/advisories/CVE-2026-17033/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 13:52:26 GMTCVECVE-2026-17183: CVE-2026-17183 CVE Recordhttps://agentprime.io/advisories/CVE-2026-17183/https://agentprime.io/advisories/CVE-2026-17183/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 17:30:06 GMTCVECVE-2026-11817: CVE-2026-11817 CVE Recordhttps://agentprime.io/advisories/CVE-2026-11817/https://agentprime.io/advisories/CVE-2026-11817/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 21:28:17 GMTCVECVE-2026-21723: CVE-2026-21723 Recordhttps://agentprime.io/advisories/CVE-2026-21723/https://agentprime.io/advisories/CVE-2026-21723/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 01:48:16 GMTCVECVE-2026-8595: Stored XSS in the table panel (TableNG)https://agentprime.io/advisories/CVE-2026-8595/https://agentprime.io/advisories/CVE-2026-8595/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 14:59:35 GMTCVECVE-2026-8609: Pre-authentication denial of service via the OAuth login routehttps://agentprime.io/advisories/CVE-2026-8609/https://agentprime.io/advisories/CVE-2026-8609/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 14:58:33 GMTCVECVE-2026-33382: Denial of service via unbounded request body sizehttps://agentprime.io/advisories/CVE-2026-33382/https://agentprime.io/advisories/CVE-2026-33382/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 14:58:23 GMTCVECVE-2026-28378: Cross-Organization Public Dashboard Deletion via Missing Org Isolationhttps://agentprime.io/advisories/CVE-2026-28378/https://agentprime.io/advisories/CVE-2026-28378/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 21:08:04 GMTCVECVE-2026-28374: IDOR in Annotations API allows unprivileged users to DELETE annotationhttps://agentprime.io/advisories/CVE-2026-28374/https://agentprime.io/advisories/CVE-2026-28374/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 19:28:40 GMTCVECVE-2026-33378: Grafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macrohttps://agentprime.io/advisories/CVE-2026-33378/https://agentprime.io/advisories/CVE-2026-33378/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 19:28:37 GMTCVECVE-2026-28383: Grafana plugin resources can lead to unbounded memory allocationhttps://agentprime.io/advisories/CVE-2026-28383/https://agentprime.io/advisories/CVE-2026-28383/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 19:28:36 GMTCVECVE-2026-33376: Auth Proxy IPv6 whitelist bypasshttps://agentprime.io/advisories/CVE-2026-33376/https://agentprime.io/advisories/CVE-2026-33376/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 19:28:34 GMTCVECVE-2026-28380: BAC in Snapshot API allows deletion of unauthorized dashboard snapshotshttps://agentprime.io/advisories/CVE-2026-28380/https://agentprime.io/advisories/CVE-2026-28380/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 19:28:32 GMTCVECVE-2026-33377: Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Adminhttps://agentprime.io/advisories/CVE-2026-33377/https://agentprime.io/advisories/CVE-2026-33377/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 19:28:28 GMTCVECVE-2026-28376: Grafana Live push endpoint allows unbounded memory allocation leading to OOMhttps://agentprime.io/advisories/CVE-2026-28376/https://agentprime.io/advisories/CVE-2026-28376/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 19:28:26 GMTCVECVE-2026-28379: Viewer-triggered race condition in Grafana Live leads to complete server crashhttps://agentprime.io/advisories/CVE-2026-28379/https://agentprime.io/advisories/CVE-2026-28379/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 May 2026 19:28:25 GMTCVECVE-2026-33375: Grafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoShttps://agentprime.io/advisories/CVE-2026-33375/https://agentprime.io/advisories/CVE-2026-33375/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 20:05:52 GMTCVE