CVE-2022-26148

概要

参考情報

• 2k8.org/post-319.html · Exploit
• security.netapp.com/advisory/ntap-20220425-0005 · Third Party Advisory

grafana のその他の脆弱性

• CVE-2026-14199高 8.1Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. T…
• CVE-2026-8609高 7.5An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eve…
• CVE-2026-8595中 5.4A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script i…
• CVE-2026-33382高 7.5Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can…
• CVE-2026-28378低 2.7The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public d…