EUVD-2026-16596Published

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.

Historical advisory saved 10 Nov 2026 02:09:19 UTC. The publisher may have updated it since then. Latest advisory.

euvd · EUVD-2026-16596

Published

When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.

Additional publisher context

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Mar 27, 2026, 2:02:11 PM

dateUpdated: Aug 27, 2026, 5:22:48 PM

10 related source bulletins · separate from aliases

SUSE-SU-2026:1524-1: Security update 5.1.3 for Multi-Linux Manager Client Tools

CVE-2025-13465 · CVE-2025-3415 · CVE-2025-61140 · CVE-2026-1615 · CVE-2026-21720 · CVE-2026-21721 · CVE-2026-21722 · CVE-2026-21724 · CVE-2026-21725 · CVE-2026-25547 · CVE-2026-26958 · CVE-2026-27606 · CVE-2026-27876 · CVE-2026-27877 · CVE-2026-27879 · CVE-2026-28375 · CVE-2026-33186

RHSA-2026:10226: Red Hat Security Advisory: grafana security update

CVE-2026-27877

RHSA-2026:19352: Red Hat Security Advisory: grafana security update

CVE-2026-27877 · CVE-2026-32282 · CVE-2026-32283

openSUSE-SU-2026:10601-1: grafana-11.6.14+security01-1.1 on GA media

CVE-2026-21720 · CVE-2026-21721 · CVE-2026-21722 · CVE-2026-21724 · CVE-2026-21725 · CVE-2026-26958 · CVE-2026-27876 · CVE-2026-27877 · CVE-2026-27879 · CVE-2026-28375 · CVE-2026-33186 · CVE-2026-33375

RHSA-2026:11416: Red Hat Security Advisory: grafana security update

CVE-2026-27877

RHSA-2026:11417: Red Hat Security Advisory: grafana security update

CVE-2026-27877

SUSE-SU-2026:2243-1: Security update 5.0.8 for Multi-Linux Manager Client Tools

CVE-2022-21698 · CVE-2025-29923 · CVE-2026-21724 · CVE-2026-21725 · CVE-2026-26958 · CVE-2026-27606 · CVE-2026-27876 · CVE-2026-27877 · CVE-2026-27879 · CVE-2026-28375 · CVE-2026-33186 · CVE-2026-33375 · CVE-2026-34986 · CVE-2026-40179 · CVE-2026-41602 · CVE-2026-42151 · CVE-2026-42154

RHSA-2026:10223: Red Hat Security Advisory: grafana security update

CVE-2026-27877

SUSE-SU-2026:2258-1: Security update for grafana

CVE-2025-29923 · CVE-2026-21724 · CVE-2026-21725 · CVE-2026-26958 · CVE-2026-27876 · CVE-2026-27877 · CVE-2026-27879 · CVE-2026-28375 · CVE-2026-33186 · CVE-2026-33375 · CVE-2026-34986 · CVE-2026-41602

RHSA-2026:19134: Red Hat Security Advisory: grafana security update

CVE-2026-27877 · CVE-2026-32282 · CVE-2026-32283

Source published: Mar 27, 2026, 2:02:11 PM (timezone not stated)
Source modified: Aug 27, 2026, 5:22:48 PM (timezone not stated)
Saved here: 10 Nov 2026 02:09:19 UTC
Source terms: ENISA EUVD · source terms and attribution apply

Original source record · Cite this exact observation · Complete original publisher JSON

Source: euvd · ENISA EUVD · source terms and attribution apply. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.

EUVD CVSS 3.1 · 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N