https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T23:42:21.386225+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bit-grafana-2026-93294 BIT-grafana-2026-93294 — Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs 2026-10-24T23:42:21.434562+00:00

Affected: Bitnami: grafana

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.

 https://db.gcve.eu/vuln/fkie_cve-2026-93294 fkie_cve-2026-93294 2026-10-24T23:42:21.434639+00:00

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.

 https://db.gcve.eu/vuln/ghsa-5wf9-m99g-f6xj GHSA-5wf9-m99g-f6xj 2026-10-24T23:42:21.434680+00:00

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity (unintended proxy). The impact is bounded by the Azure role granted to that identity.

 https://db.gcve.eu/vuln/rhsa-2026:85295 RHSA-2026:85295 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-24T23:42:21.434703+00:00

grafana: Grafana: Unauthorized cross-organization user management via the SCIM API grafana: Grafana: Information disclosure via Azure Monitor resource proxy hono: hono: Information disclosure via malformed percent-encoded paths in serveStatic