Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| High | n/a | RHSA-2026:89732 |
grafana security update
Red Hat, GrafanaGrafana, Red Hat Enterprise Linux for x86_64 10
|
Red Hat Security Advisories | |||
|
RHSA-2026:89732grafana security update
Executive summaryRed Hat has released a security update for grafana, the open source metrics dashboard, on Red Hat Enterprise Linux 10. Red Hat rates the update as Important and says it fixes an information disclosure flaw in Grafana Unified Alerting and a denial of service flaw in the Go net/textproto and mime/multipart packages. The recommended action is to apply the grafana package update listed in the advisory. Technical summaryThe advisory describes two fixes: CVE-2026-17183, an information disclosure vulnerability in Grafana Unified Alerting, and CVE-2026-94440, a denial of service caused by a memory limit bypass in multipart form parsing in the Go net/textproto and mime/multipart packages. The advisory does not state the attack vector, required privileges, or CVSS scores, and refers readers to the CVE pages for those details. The fixed package is grafana-10.2.6-28.el10_2.9, and the advisory lists its SHA-256 checksums for each architecture. No workarounds or detection guidance are stated, and exploitation in the wild is not stated. Vendor-specific update steps are referred to https://access.redhat.com/articles/11258. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Dropped extracted product not named in the source: Go net/textproto Dropped extracted product not named in the source: Go mime/multipart Summarized from access.redhat.com/errata/RHSA-2026:89732 ScoreNo CVSS score published. Affects
Red Hat Product SecurityPublished
Read the advisory
|
|||||||