{"id":"EUVD-2026-16338","enisaUuid":"f246e287-9e7b-3508-aa70-b1edef537179","description":"A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.","datePublished":"Mar 26, 2026, 8:06:18 PM","dateUpdated":"Aug 27, 2026, 5:22:23 PM","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":"https://grafana.com/security/security-advisories/cve-2026-21724\n","aliases":"CVE-2026-21724\nGHSA-7g92-g4vh-hp84\n","assigner":"GRAFANA","epss":0.28,"enisaIdProduct":[{"id":"123b25b7-fc7c-332b-aa44-1b9676e1f2dc","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"11.6.9 \u003c11.6.14"},{"id":"655b9272-f76b-3ac5-97d8-05b4c0e33429","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"12.1.5 \u003c12.1.10"},{"id":"8d510822-f976-3182-ba40-f4fe249418ac","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"12.3.1 \u003c12.3.6"},{"id":"dd314f91-c482-3982-9f6e-c1106f288437","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"12.2.2 \u003c12.2.8"}],"enisaIdVendor":[{"id":"a928feee-56e6-3c7b-8bd3-7010f67daaf7","vendor":{"name":"Grafana"}}],"enisaIdVulnerability":[{"id":"2d1ba059-4352-35f4-bf45-c37d58060012","vulnerability":{"id":"CVE-2026-21724","description":"A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.","datePublished":"Mar 26, 2026, 8:06:18 PM","dateUpdated":"Aug 27, 2026, 5:22:23 PM","status":"PUBLISHED","baseScore":5.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","references":"https://grafana.com/security/security-advisories/cve-2026-21724\n","enisa_id":"EUVD-2026-16338\n","assigner":"GRAFANA","epss":0.28,"dataProcessed":"Nov 15, 2026, 7:22:39 AM","vulnerabilityProduct":[{"id":"a8c6276e-e7cf-3311-bcaa-0cb807a8b858","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"12.1.5 \u003c12.1.10"},{"id":"d9378940-4361-31c9-a191-0984d84e4cc5","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"12.3.1 \u003c12.3.6"},{"id":"ddfe0eec-d3f2-31f6-ae59-611a63222399","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"12.2.2 \u003c12.2.8"},{"id":"e756a13d-e490-3dc0-a9e7-bed2ce21fd19","product":{"name":"Grafana OSS","vendor":{"name":"Grafana"}},"product_version":"11.6.9 \u003c11.6.14"}],"vulnerabilityVendor":[{"id":"2b36c8c5-1ced-3b72-97e2-bb059b1167e7","vendor":{"name":"Grafana"}}]}},{"id":"af8b1972-dc4d-3f9f-b782-d4759ff55592","vulnerability":{"id":"GHSA-7g92-g4vh-hp84","description":"Grafana OSS: Authorization bypass allows users with Editor role to modify protected webhook URLs without permissions","datePublished":"Mar 26, 2026, 9:31:27 PM","dateUpdated":"Jul 21, 2026, 1:46:49 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-21724\nhttps://github.com/grafana/grafana/commit/daffe750de85b0dbf79f206a35835cf66a83d6ca\nhttps://github.com/advisories/GHSA-7g92-g4vh-hp84\nhttps://github.com/grafana/grafana\nhttps://github.com/grafana/grafana/releases/tag/v12.3.6\nhttps://grafana.com/security/security-advisories/cve-2026-21724\n","enisa_id":"EUVD-2026-16338\n","aliases":"GHSA-7g92-g4vh-hp84\nCVE-2026-21724\n","epss":0.0,"dataProcessed":"Nov 15, 2026, 2:48:45 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"34ab3d21-9d7f-3db0-9488-cb2be60a9725","advisory":{"id":"SUSE-SU-2026:1524-1","description":"Security update 5.1.3 for Multi-Linux Manager Client Tools","summary":"Security update 5.1.3 for Multi-Linux Manager Client Tools","datePublished":"Apr 21, 2026, 9:26:09 AM","dateUpdated":"Apr 21, 2026, 9:26:09 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1524-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-20261524-1/\nhttps://lists.suse.com/pipermail/sle-updates/2026-April/045834.html\nhttps://bugzilla.suse.com/1245302\nhttps://bugzilla.suse.com/1250367\nhttps://bugzilla.suse.com/1252548\nhttps://bugzilla.suse.com/1252964\nhttps://bugzilla.suse.com/1254154\nhttps://bugzilla.suse.com/1254619\nhttps://bugzilla.suse.com/1257329\nhttps://bugzilla.suse.com/1257337\nhttps://bugzilla.suse.com/1257349\nhttps://bugzilla.suse.com/1257442\nhttps://bugzilla.suse.com/1257447\nhttps://bugzilla.suse.com/1257660\nhttps://bugzilla.suse.com/1257841\nhttps://bugzilla.suse.com/1257897\nhttps://bugzilla.suse.com/1257941\nhttps://bugzilla.suse.com/1258015\nhttps://bugzilla.suse.com/1258136\nhttps://bugzilla.suse.com/1258418\nhttps://bugzilla.suse.com/1258595\nhttps://bugzilla.suse.com/1258873\nhttps://bugzilla.suse.com/1258893\nhttps://bugzilla.suse.com/1258927\nhttps://bugzilla.suse.com/1259208\nhttps://bugzilla.suse.com/1260263\nhttps://bugzilla.suse.com/1260267\nhttps://bugzilla.suse.com/1260878\nhttps://bugzilla.suse.com/1261025\nhttps://bugzilla.suse.com/1261026\nhttps://bugzilla.suse.com/1261027\nhttps://bugzilla.suse.com/1261029\nhttps://www.suse.com/security/cve/CVE-2025-13465/\nhttps://www.suse.com/security/cve/CVE-2025-3415/\nhttps://www.suse.com/security/cve/CVE-2025-61140/\nhttps://www.suse.com/security/cve/CVE-2026-1615/\nhttps://www.suse.com/security/cve/CVE-2026-21720/\nhttps://www.suse.com/security/cve/CVE-2026-21721/\nhttps://www.suse.com/security/cve/CVE-2026-21722/\nhttps://www.suse.com/security/cve/CVE-2026-21724/\nhttps://www.suse.com/security/cve/CVE-2026-21725/\nhttps://www.suse.com/security/cve/CVE-2026-25547/\nhttps://www.suse.com/security/cve/CVE-2026-26958/\nhttps://www.suse.com/security/cve/CVE-2026-27606/\nhttps://www.suse.com/security/cve/CVE-2026-27876/\nhttps://www.suse.com/security/cve/CVE-2026-27877/\nhttps://www.suse.com/security/cve/CVE-2026-27879/\nhttps://www.suse.com/security/cve/CVE-2026-28375/\nhttps://www.suse.com/security/cve/CVE-2026-33186/\n","aliases":"CVE-2025-13465\nCVE-2025-3415\nCVE-2025-61140\nCVE-2026-1615\nCVE-2026-21720\nCVE-2026-21721\nCVE-2026-21722\nCVE-2026-21724\nCVE-2026-21725\nCVE-2026-25547\nCVE-2026-26958\nCVE-2026-27606\nCVE-2026-27876\nCVE-2026-27877\nCVE-2026-27879\nCVE-2026-28375\nCVE-2026-33186\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"085fddd3-1b7b-3c73-8810-dd6c94ab5306","product":{"name":"firewalld-prometheus-config-0.1-150002.3.8.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"0f376bc5-1ac3-33bc-a498-9add69852582","product":{"name":"grafana-11.6.14+security01-150002.4.14.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1074bd35-53dc-3237-955d-682c4dbed744","product":{"name":"firewalld-prometheus-config-0.1-150002.3.8.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"26dc41ad-0d7b-37b2-a430-f26179d730eb","product":{"name":"golang-github-prometheus-prometheus-3.5.0-150002.3.8.1.s390x","vendor":{"name":"SUSE"}}},{"id":"296b4aa5-a5d6-3ab9-a9e0-240045784099","product":{"name":"SUSE Multi Linux Manager Tools SLE-Micro-5","vendor":{"name":"SUSE"}}},{"id":"326b886d-b181-3455-9a71-dccc9692c333","product":{"name":"SUSE Multi Linux Manager Tools SLE-15","vendor":{"name":"SUSE"}}},{"id":"53d8494f-e922-381f-b6d4-e0f02a4a7927","product":{"name":"grafana-11.6.14+security01-150002.4.14.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"69fa6f02-fc34-354c-9d97-9ab682aec35b","product":{"name":"mgrctl-lang-5.1.26-150002.3.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"6be46d63-63b0-315b-8677-9e9f4112ab33","product":{"name":"prometheus-blackbox_exporter-0.26.0-150002.3.6.1.s390x","vendor":{"name":"SUSE"}}},{"id":"732e215b-1294-39b4-9cec-a8319610ddc1","product":{"name":"golang-github-prometheus-prometheus-3.5.0-150002.3.8.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"85b4badc-7741-388c-a02c-b176cd29a6cf","product":{"name":"mgrctl-5.1.26-150002.3.12.1.s390x","vendor":{"name":"SUSE"}}},{"id":"8dcba1f3-9d65-322b-890a-be088269b017","product":{"name":"mgrctl-bash-completion-5.1.26-150002.3.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"91790865-8c7c-3b13-b629-98a464c2a0dc","product":{"name":"golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"923e9b83-22bb-3a46-90f6-8b7bb049a418","product":{"name":"grafana-11.6.14+security01-150002.4.14.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9fe20e82-53d1-313a-819f-2492d736f6c3","product":{"name":"golang-github-prometheus-prometheus-3.5.0-150002.3.8.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"a03612a9-96c5-3e60-ac5e-efe42233f581","product":{"name":"golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a75f7591-b50e-3f61-b40c-5221a1d7e0c8","product":{"name":"prometheus-blackbox_exporter-0.26.0-150002.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b8319230-ca6a-338f-b01d-db6ead52e41c","product":{"name":"mgrctl-zsh-completion-5.1.26-150002.3.12.1.noarch","vendor":{"name":"SUSE"}}},{"id":"c3646963-5534-3f93-9205-8b99ed7984b7","product":{"name":"prometheus-blackbox_exporter-0.26.0-150002.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"c9e90816-95ae-3116-a20f-479346e16bbd","product":{"name":"mgrctl-5.1.26-150002.3.12.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"cbb8b307-7575-394b-8606-a1ffa95e43b2","product":{"name":"firewalld-prometheus-config-0.1-150002.3.8.1.s390x","vendor":{"name":"SUSE"}}},{"id":"cc9d2401-6990-32ce-a9e2-342c3a7a7fe8","product":{"name":"mgrctl-5.1.26-150002.3.12.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"d556a887-87ba-3307-8969-c03345c59d65","product":{"name":"mgrctl-5.1.26-150002.3.12.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e29079b6-1dbe-3cda-a133-2deec97dfb00","product":{"name":"golang-github-prometheus-prometheus-3.5.0-150002.3.8.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e9d838db-52fa-3c88-8356-d8e589a69ce7","product":{"name":"firewalld-prometheus-config-0.1-150002.3.8.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"ea5db375-1a5e-39f1-8a87-26a912233505","product":{"name":"spacecmd-5.1.13-150002.3.9.3.noarch","vendor":{"name":"SUSE"}}},{"id":"f3293420-450e-3fde-bf21-69634bcde073","product":{"name":"golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.6.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f86071bb-a367-3c71-baef-7eef5fcd5684","product":{"name":"golang-github-lusitaniae-apache_exporter-1.0.10-150002.3.6.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f951881f-81b3-32c0-9968-bfdd5eb8cfea","product":{"name":"grafana-11.6.14+security01-150002.4.14.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"ff3f0159-c267-3c5b-9862-c90d629ea9fd","product":{"name":"prometheus-blackbox_exporter-0.26.0-150002.3.6.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"435022b8-2134-3c44-80f8-ed3d6a97c52d","advisory":{"id":"SUSE-SU-2026:2243-1","description":"Security update 5.0.8 for Multi-Linux Manager Client Tools","summary":"Security update 5.0.8 for Multi-Linux Manager Client Tools","datePublished":"Jun 3, 2026, 2:10:38 PM","dateUpdated":"Jun 3, 2026, 2:10:38 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2243-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-20262243-1/\nhttps://lists.suse.com/pipermail/sle-updates/2026-June/047083.html\nhttps://bugzilla.suse.com/1248699\nhttps://bugzilla.suse.com/1248707\nhttps://bugzilla.suse.com/1252964\nhttps://bugzilla.suse.com/1254619\nhttps://bugzilla.suse.com/1257941\nhttps://bugzilla.suse.com/1258595\nhttps://bugzilla.suse.com/1258873\nhttps://bugzilla.suse.com/1258893\nhttps://bugzilla.suse.com/1258927\nhttps://bugzilla.suse.com/1259208\nhttps://bugzilla.suse.com/1259999\nhttps://bugzilla.suse.com/1260263\nhttps://bugzilla.suse.com/1260267\nhttps://bugzilla.suse.com/1260878\nhttps://bugzilla.suse.com/1260881\nhttps://bugzilla.suse.com/1261025\nhttps://bugzilla.suse.com/1261026\nhttps://bugzilla.suse.com/1261027\nhttps://bugzilla.suse.com/1261029\nhttps://bugzilla.suse.com/1261810\nhttps://bugzilla.suse.com/1262222\nhttps://bugzilla.suse.com/1262950\nhttps://bugzilla.suse.com/1263501\nhttps://bugzilla.suse.com/1263986\nhttps://bugzilla.suse.com/1263987\nhttps://www.suse.com/security/cve/CVE-2022-21698/\nhttps://www.suse.com/security/cve/CVE-2025-29923/\nhttps://www.suse.com/security/cve/CVE-2026-21724/\nhttps://www.suse.com/security/cve/CVE-2026-21725/\nhttps://www.suse.com/security/cve/CVE-2026-26958/\nhttps://www.suse.com/security/cve/CVE-2026-27606/\nhttps://www.suse.com/security/cve/CVE-2026-27876/\nhttps://www.suse.com/security/cve/CVE-2026-27877/\nhttps://www.suse.com/security/cve/CVE-2026-27879/\nhttps://www.suse.com/security/cve/CVE-2026-28375/\nhttps://www.suse.com/security/cve/CVE-2026-33186/\nhttps://www.suse.com/security/cve/CVE-2026-33375/\nhttps://www.suse.com/security/cve/CVE-2026-34986/\nhttps://www.suse.com/security/cve/CVE-2026-40179/\nhttps://www.suse.com/security/cve/CVE-2026-41602/\nhttps://www.suse.com/security/cve/CVE-2026-42151/\nhttps://www.suse.com/security/cve/CVE-2026-42154/\n","aliases":"CVE-2022-21698\nCVE-2025-29923\nCVE-2026-21724\nCVE-2026-21725\nCVE-2026-26958\nCVE-2026-27606\nCVE-2026-27876\nCVE-2026-27877\nCVE-2026-27879\nCVE-2026-28375\nCVE-2026-33186\nCVE-2026-33375\nCVE-2026-34986\nCVE-2026-40179\nCVE-2026-41602\nCVE-2026-42151\nCVE-2026-42154\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"037c4688-495b-3f9b-9fb0-0e14e3e2d25d","product":{"name":"golang-github-prometheus-node_exporter-1.10.2-150100.3.41.2.s390x","vendor":{"name":"SUSE"}}},{"id":"09bb671f-2ee5-34ec-83b2-5fb2334a0ad2","product":{"name":"firewalld-prometheus-config-0.1-150000.3.72.2.s390x","vendor":{"name":"SUSE"}}},{"id":"0d488bdd-a697-372e-9baf-a1ccce5c1ab6","product":{"name":"mgrctl-0.1.39-150000.1.33.2.ppc64le","vendor":{"name":"SUSE"}}},{"id":"0df63b71-276d-34b9-be7d-0f49a356a7db","product":{"name":"golang-github-prometheus-prometheus-3.5.3-150000.3.72.2.aarch64","vendor":{"name":"SUSE"}}},{"id":"166c7718-0b64-345e-ba71-937760fb5598","product":{"name":"golang-github-QubitProducts-exporter_exporter-0.4.0-150000.1.24.2.x86_64","vendor":{"name":"SUSE"}}},{"id":"19cd13fb-4638-3d9a-9978-8dce5d14c5e1","product":{"name":"golang-github-QubitProducts-exporter_exporter-0.4.0-150000.1.24.2.i586","vendor":{"name":"SUSE"}}},{"id":"1a01c5f6-f2ce-3bb3-99ef-b62bc2585196","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP4","vendor":{"name":"SUSE"}}},{"id":"1d907491-53fe-35f1-9ba3-f7ec6c614055","product":{"name":"firewalld-prometheus-config-0.1-150000.3.72.2.aarch64","vendor":{"name":"SUSE"}}},{"id":"2431cced-f8a5-3925-a1c1-7c2be862757f","product":{"name":"SUSE Linux Enterprise Server 15 SP4-LTSS","vendor":{"name":"SUSE"}}},{"id":"2a6cf4bd-87cb-3700-90fa-6cf505542a7f","product":{"name":"golang-github-prometheus-node_exporter-1.10.2-150100.3.41.2.ppc64le","vendor":{"name":"SUSE"}}},{"id":"2ad9817d-80bb-34a2-ab10-8e6325faf8a9","product":{"name":"golang-github-prometheus-node_exporter-1.10.2-150100.3.41.2.x86_64","vendor":{"name":"SUSE"}}},{"id":"313f311c-72f3-3fcd-b915-51e0f74b9bf1","product":{"name":"golang-github-prometheus-prometheus-3.5.3-150000.3.72.2.i586","vendor":{"name":"SUSE"}}},{"id":"316743be-143f-3a03-833c-48d0704208c3","product":{"name":"golang-github-QubitProducts-exporter_exporter-0.4.0-150000.1.24.2.aarch64","vendor":{"name":"SUSE"}}},{"id":"39841fce-12f3-3295-acc3-c1da9e7a0b76","product":{"name":"SUSE Manager Client Tools 15","vendor":{"name":"SUSE"}}},{"id":"41cb7915-baf3-30bc-93aa-856a43564213","product":{"name":"mgrctl-0.1.39-150000.1.33.2.i586","vendor":{"name":"SUSE"}}},{"id":"48354155-c8ce-30a2-bee8-70aa7c7773b2","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP6","vendor":{"name":"SUSE"}}},{"id":"5340d00c-6b0e-3df3-8175-4decbd13069e","product":{"name":"grafana-11.6.14+security01-150000.1.95.2.aarch64","vendor":{"name":"SUSE"}}},{"id":"5554904a-1eac-3728-9921-df822143eb4e","product":{"name":"firewalld-prometheus-config-0.1-150000.3.72.2.ppc64le","vendor":{"name":"SUSE"}}},{"id":"571a6db4-60d6-3eb3-98ae-be5923d0ec53","product":{"name":"SUSE Linux Enterprise Module for Basesystem 15 SP7","vendor":{"name":"SUSE"}}},{"id":"67ad66b0-fdb2-3db6-b9b4-57c87a1f4a59","product":{"name":"mgrctl-0.1.39-150000.1.33.2.aarch64","vendor":{"name":"SUSE"}}},{"id":"6887449d-d4c1-31d5-b264-e23b226a507e","product":{"name":"golang-github-prometheus-prometheus-3.5.3-150000.3.72.2.x86_64","vendor":{"name":"SUSE"}}},{"id":"71ef1acf-ecb1-3f98-b1b5-57044ea806cc","product":{"name":"grafana-11.6.14+security01-150000.1.95.2.ppc64le","vendor":{"name":"SUSE"}}},{"id":"76cec38f-5435-32b9-ba80-4b78739642d6","product":{"name":"golang-github-QubitProducts-exporter_exporter-0.4.0-150000.1.24.2.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7870f76b-262d-3035-8f72-930b0879e6ed","product":{"name":"SUSE Linux Enterprise Server 15 SP5-LTSS","vendor":{"name":"SUSE"}}},{"id":"7f27a7f7-4e0d-35ff-a57b-90c69e59053c","product":{"name":"golang-github-prometheus-prometheus-3.5.3-150000.3.72.2.s390x","vendor":{"name":"SUSE"}}},{"id":"804584bf-d9f5-3135-8b14-344f46e21f41","product":{"name":"SUSE Linux Enterprise Server for SAP Applications 15 SP5","vendor":{"name":"SUSE"}}},{"id":"947267c4-fd17-3aa5-a1d1-c7e00db21e99","product":{"name":"SUSE Manager Client Tools for SLE Micro 5","vendor":{"name":"SUSE"}}},{"id":"977a4919-7b51-3c4e-a30c-edaf1f7c5c48","product":{"name":"grafana-11.6.14+security01-150000.1.95.2.x86_64","vendor":{"name":"SUSE"}}},{"id":"a54fdcc4-759b-37ee-99a9-16c3bf188b0c","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","vendor":{"name":"SUSE"}}},{"id":"a66019ca-24dd-3cbd-be7f-8db207e6a791","product":{"name":"prometheus-postgres_exporter-0.10.1-150000.1.20.2.i586","vendor":{"name":"SUSE"}}},{"id":"a89cdcab-3790-338c-9752-614605671ade","product":{"name":"prometheus-postgres_exporter-0.10.1-150000.1.20.2.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a8ac5ff4-91b2-37c4-b46a-cf8135ef1247","product":{"name":"prometheus-postgres_exporter-0.10.1-150000.1.20.2.x86_64","vendor":{"name":"SUSE"}}},{"id":"acb17af6-ee19-39d8-8cf1-74ddf7b3446c","product":{"name":"golang-github-prometheus-prometheus-3.5.3-150000.3.72.2.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b2f33654-1d34-3b31-a009-2d67d0e52346","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS","vendor":{"name":"SUSE"}}},{"id":"b5ad7a4c-81ac-34c9-aedb-cdb870ee5780","product":{"name":"SUSE Linux Enterprise Server 15 SP6-LTSS","vendor":{"name":"SUSE"}}},{"id":"b9366a8f-02e2-33af-8cc8-6a388c5a14b8","product":{"name":"prometheus-postgres_exporter-0.10.1-150000.1.20.2.aarch64","vendor":{"name":"SUSE"}}},{"id":"bfe1335b-6294-3de6-be16-301edc59f77f","product":{"name":"mgrctl-bash-completion-0.1.39-150000.1.33.2.noarch","vendor":{"name":"SUSE"}}},{"id":"c737b5e6-b9dc-3005-b13b-7154d27bd439","product":{"name":"grafana-11.6.14+security01-150000.1.95.2.s390x","vendor":{"name":"SUSE"}}},{"id":"cc0b9ebd-042f-3474-bd59-657b956cc18b","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","vendor":{"name":"SUSE"}}},{"id":"d1f6af07-b148-3269-a1c6-877c4de5b2d0","product":{"name":"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS","vendor":{"name":"SUSE"}}},{"id":"da257130-8005-3157-bdab-6e73d5c9e0ee","product":{"name":"golang-github-prometheus-node_exporter-1.10.2-150100.3.41.2.aarch64","vendor":{"name":"SUSE"}}},{"id":"e2791aac-ecfe-3d59-9021-ea8695d3ff77","product":{"name":"prometheus-postgres_exporter-0.10.1-150000.1.20.2.s390x","vendor":{"name":"SUSE"}}},{"id":"e3178052-d793-30f7-b99f-9ac164de4906","product":{"name":"mgrctl-zsh-completion-0.1.39-150000.1.33.2.noarch","vendor":{"name":"SUSE"}}},{"id":"e9391316-0621-312c-be38-bd3d4e8f3bf0","product":{"name":"mgrctl-0.1.39-150000.1.33.2.s390x","vendor":{"name":"SUSE"}}},{"id":"ed709c20-1537-3e06-a168-c936228c3886","product":{"name":"firewalld-prometheus-config-0.1-150000.3.72.2.x86_64","vendor":{"name":"SUSE"}}},{"id":"f1eb0520-a520-3ed9-94e6-ee0fd5ba7cb4","product":{"name":"firewalld-prometheus-config-0.1-150000.3.72.2.i586","vendor":{"name":"SUSE"}}},{"id":"f68af92e-1f05-34fa-ad64-1705cac06bc5","product":{"name":"spacecmd-5.0.16-150000.3.145.1.noarch","vendor":{"name":"SUSE"}}},{"id":"f70ca75c-298d-3f9a-a0d5-565c3d4369e1","product":{"name":"mgrctl-lang-0.1.39-150000.1.33.2.noarch","vendor":{"name":"SUSE"}}},{"id":"fb93ce1b-e080-37dd-84b7-b7044c521ac8","product":{"name":"golang-github-prometheus-node_exporter-1.10.2-150100.3.41.2.i586","vendor":{"name":"SUSE"}}},{"id":"fe085992-ef60-3d1e-bb4d-e0359e8868e4","product":{"name":"mgrctl-0.1.39-150000.1.33.2.x86_64","vendor":{"name":"SUSE"}}},{"id":"fe147364-7b4d-3514-859c-9ea7df730b70","product":{"name":"golang-github-QubitProducts-exporter_exporter-0.4.0-150000.1.24.2.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"45c8ee50-58c6-32af-8fe9-f5b45ce364c0","advisory":{"id":"openSUSE-SU-2026:10601-1","description":"grafana-11.6.14+security01-1.1 on GA media","summary":"grafana-11.6.14+security01-1.1 on GA media","datePublished":"Apr 22, 2026, 12:00:00 AM","dateUpdated":"Apr 22, 2026, 12:00:00 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10601-1.json\nhttps://www.suse.com/security/cve/CVE-2026-21720/\nhttps://www.suse.com/security/cve/CVE-2026-21721/\nhttps://www.suse.com/security/cve/CVE-2026-21722/\nhttps://www.suse.com/security/cve/CVE-2026-21724/\nhttps://www.suse.com/security/cve/CVE-2026-21725/\nhttps://www.suse.com/security/cve/CVE-2026-26958/\nhttps://www.suse.com/security/cve/CVE-2026-27876/\nhttps://www.suse.com/security/cve/CVE-2026-27877/\nhttps://www.suse.com/security/cve/CVE-2026-27879/\nhttps://www.suse.com/security/cve/CVE-2026-28375/\nhttps://www.suse.com/security/cve/CVE-2026-33186/\nhttps://www.suse.com/security/cve/CVE-2026-33375/\n","aliases":"CVE-2026-21720\nCVE-2026-21721\nCVE-2026-21722\nCVE-2026-21724\nCVE-2026-21725\nCVE-2026-26958\nCVE-2026-27876\nCVE-2026-27877\nCVE-2026-27879\nCVE-2026-28375\nCVE-2026-33186\nCVE-2026-33375\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"033028ec-cf9d-33c5-9405-18dff5c86cb0","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"16a38484-1b5b-3dc5-ae4e-3a501012d648","product":{"name":"grafana-11.6.14+security01-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"865892fe-c42e-38af-9098-e810d6d9e2e2","product":{"name":"grafana-11.6.14+security01-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b74dc993-6221-399a-9785-91d3c8c58fc2","product":{"name":"grafana-11.6.14+security01-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"baa71da3-9ae8-3f28-a871-b51d1b0c8873","product":{"name":"grafana-11.6.14+security01-1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"ae8dde5c-61e6-3b6c-9e3d-c9f2629e7c15","advisory":{"id":"SUSE-SU-2026:2258-1","description":"Security update for grafana","summary":"Security update for grafana","datePublished":"Jun 3, 2026, 2:22:06 PM","dateUpdated":"Jun 3, 2026, 2:22:06 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2258-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-20262258-1/\nhttps://lists.suse.com/pipermail/sle-updates/2026-June/047070.html\nhttps://bugzilla.suse.com/1258595\nhttps://bugzilla.suse.com/1258873\nhttps://bugzilla.suse.com/1259999\nhttps://bugzilla.suse.com/1260263\nhttps://bugzilla.suse.com/1260878\nhttps://bugzilla.suse.com/1260881\nhttps://bugzilla.suse.com/1261025\nhttps://bugzilla.suse.com/1261026\nhttps://bugzilla.suse.com/1261027\nhttps://bugzilla.suse.com/1261029\nhttps://bugzilla.suse.com/1262950\nhttps://bugzilla.suse.com/1263501\nhttps://www.suse.com/security/cve/CVE-2025-29923/\nhttps://www.suse.com/security/cve/CVE-2026-21724/\nhttps://www.suse.com/security/cve/CVE-2026-21725/\nhttps://www.suse.com/security/cve/CVE-2026-26958/\nhttps://www.suse.com/security/cve/CVE-2026-27876/\nhttps://www.suse.com/security/cve/CVE-2026-27877/\nhttps://www.suse.com/security/cve/CVE-2026-27879/\nhttps://www.suse.com/security/cve/CVE-2026-28375/\nhttps://www.suse.com/security/cve/CVE-2026-33186/\nhttps://www.suse.com/security/cve/CVE-2026-33375/\nhttps://www.suse.com/security/cve/CVE-2026-34986/\nhttps://www.suse.com/security/cve/CVE-2026-41602/\n","aliases":"CVE-2025-29923\nCVE-2026-21724\nCVE-2026-21725\nCVE-2026-26958\nCVE-2026-27876\nCVE-2026-27877\nCVE-2026-27879\nCVE-2026-28375\nCVE-2026-33186\nCVE-2026-33375\nCVE-2026-34986\nCVE-2026-41602\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"24be87cb-abbb-3ffd-bf2f-3b32610cd59b","product":{"name":"SUSE Linux Enterprise Module for Package Hub 15 SP7","vendor":{"name":"SUSE"}}},{"id":"58c5f1a2-379b-3ded-bacb-93df74e30826","product":{"name":"grafana-11.6.14+security01-150200.3.88.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"8b840e28-2068-3855-ac6f-8bfb52d56392","product":{"name":"grafana-11.6.14+security01-150200.3.88.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e12555b3-bb21-3788-add5-180ed91eb28c","product":{"name":"grafana-11.6.14+security01-150200.3.88.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e87267c6-92e6-3131-b680-d87388763734","product":{"name":"grafana-11.6.14+security01-150200.3.88.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"ff2de9e3-535e-3112-b3f8-6e2e5553931b","advisory":{"id":"WID-SEC-W-2026-0886","description":"Grafana: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und DoS","summary":"Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um Dateien zu manipulieren oder um einen Denial-of-Service-Zustand herbeizuführen.","datePublished":"Mar 26, 2026, 11:00:00 PM","dateUpdated":"Jun 4, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0886.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-0886\n","aliases":"CVE-2026-21724\nCVE-2026-33375\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"2a9bd633-a576-3c9c-b1b0-3e396d31c182","product":{"name":"12.4.2","vendor":{"name":"IGEL"}}},{"id":"5a37f747-5b4d-35aa-bf4e-f07e286187a7","product":{"name":"12.2.8","vendor":{"name":"Grafana"}}},{"id":"9072f11b-7bfe-3b9c-9c5a-1832c8b481fc","product":{"name":"SUSE Linux","vendor":{"name":"SUSE"}}},{"id":"9e04bb1b-3ccf-3b09-9fd9-d41bb900121a","product":{"name":"12.1.10","vendor":{"name":"Grafana"}}},{"id":"b0e5e72d-d682-3242-8c06-b3af9e22bb24","product":{"name":"Grafana","vendor":{"name":"Grafana"}}},{"id":"e35f2b1f-ce26-3fcd-b83f-c70ed715f7c6","product":{"name":"12.3.6","vendor":{"name":"Nanoleaf"}}},{"id":"ed645c60-1904-356c-91f1-bdb729eb0e6d","product":{"name":"11.6.14","vendor":{"name":"Grafana"}}}]}}]}