CVE-2026-14199높음 8.1Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. T…
CVE-2026-8609높음 7.5An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eve…
CVE-2026-8595보통 5.4A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script i…
CVE-2026-33382높음 7.5Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can…
CVE-2026-28378낮음 2.7The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public d…