CVE-2026-95502

Publié : 13 octobre 2026

Modifié : 13 octobre 2026

Score CVSS

5.3

MEDIUM

Description détaillée

A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption). Exploitation requires an administrator to have configured Git Sync with that server.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Références et Patchs

https://grafana.com/security/security-advisories/cve-2026-95502

Dernières Vulnérabilités

CVE-2026-93294

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.

VOIR DÉTAILS

CVE-2026-92892

Potential arbitrary code execution, under specific configurations.

VOIR DÉTAILS

CVE-2026-52394

DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.

VOIR DÉTAILS