CVE-2026-92892

Publié : 13 octobre 2026

Modifié : 13 octobre 2026

Lien officiel NVD

Score CVSS

CRITICAL

Description détaillée

Potential arbitrary code execution, under specific configurations.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Références et Patchs

https://docs.jfrog.com/releases/docs/jfrog-security-advisories https://github.com/jfrog/jfrog-cli/releases

Dernières Vulnérabilités

CVE-2026-95502

A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption). Exploitation requires an administrator to have configured Git Sync with that server.

VOIR DÉTAILS

CVE-2026-93294

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.

VOIR DÉTAILS

CVE-2026-52394

DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

VOIR DÉTAILS