https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 16:53:36 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-107365 <p>A user with query access to a Google Cloud Monitoring data source can use its resource proxy to send requests to other Cloud Monitoring API paths with the data source&#39;s credentials, and read data from any project those credentials can reach. When the data source forwards the user&#39;s OAuth identity or uses Workload Identity Federation, the impact depends on that credential&#39;s permissions. Fixed in Google Cloud Monitoring plugin 12.6.7.</p> <p>A user with query access to a Google Cloud Monitoring data source can use its resource proxy to send requests to other Cloud Monitoring API paths with the data source&#39;s credentials, and read data from any project those credentials can reach. When the data source forwards the user&#39;s OAuth identity or uses Workload Identity Federation, the impact depends on that credential&#39;s permissions. Fixed in Google Cloud Monitoring plugin 12.6.7.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107365 https://db.gcve.eu/vuln/ghsa-5cch-996p-v9q8 <p>A user with query access to a Google Cloud Monitoring data source can use its resource proxy to send requests to other Cloud Monitoring API paths with the data source&#39;s credentials, and read data from any project those credentials can reach. When the data source forwards the user&#39;s OAuth identity or uses Workload Identity Federation, the impact depends on that credential&#39;s permissions. Fixed in Google Cloud Monitoring plugin 12.6.7.</p> <p>A user with query access to a Google Cloud Monitoring data source can use its resource proxy to send requests to other Cloud Monitoring API paths with the data source&#39;s credentials, and read data from any project those credentials can reach. When the data source forwards the user&#39;s OAuth identity or uses Workload Identity Federation, the impact depends on that credential&#39;s permissions. Fixed in Google Cloud Monitoring plugin 12.6.7.</p> https://db.gcve.eu/vuln/ghsa-5cch-996p-v9q8 https://db.gcve.eu/vuln/msrc_cve-2026-107365 msrc_CVE-2026-107365 https://db.gcve.eu/vuln/msrc_cve-2026-107365 https://db.gcve.eu/vuln/rhsa-2026:99114 <p>grafana: Math expressions could crash Grafana grafana: Azure Monitor data source could leak its Azure access token grafana: Grafana: Information disclosure via legacy schema switch in contact points grafana: SSO secrets readable by low-privileged users when an experimental feature is enabled grafana: ELASTICSEARCH DATA SOURCE COULD BE USED TO SEND ARBITRARY REQUESTS TO ELASTICSEARCH grafana: GOOGLE CLOUD MONITORING DATA SOURCE COULD REACH OTHER CLOUD MONITORING API PATHS</p> <p>grafana: Math expressions could crash Grafana grafana: Azure Monitor data source could leak its Azure access token grafana: Grafana: Information disclosure via legacy schema switch in contact points grafana: SSO secrets readable by low-privileged users when an experimental feature is enabled grafana: ELASTICSEARCH DATA SOURCE COULD BE USED TO SEND ARBITRARY REQUESTS TO ELASTICSEARCH grafana: GOOGLE CLOUD MONITORING DATA SOURCE COULD REACH OTHER CLOUD MONITORING API PATHS</p> https://db.gcve.eu/vuln/rhsa-2026:99114 https://db.gcve.eu/vuln/wid-sec-w-2026-4568 <p>Ein Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4568