Retour à la veille
CVE-2026-93294
Score CVSS
6.3
MEDIUM
Description détaillée
A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.
Vecteur d'attaque (CVSS)
Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Références et Patchs
Dernières Vulnérabilités
CVE-2026-95502
A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption). Exploitation requires an administrator to have configured Git Sync with that server.
VOIR DÉTAILS
CVE-2026-92892
Potential arbitrary code execution, under specific configurations.
VOIR DÉTAILS
CVE-2026-52394
DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.
VOIR DÉTAILS