PT-2026-57211 · Grafana · Grafana Oss

Avamost369 · Publicado 2026-07-10 · Atualizado 2026-07-10 · CVE-2026-8595

Mitre

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L

A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-8595

Produtos afetados

Grafana Oss

Referências · 2

• https://grafana.com/security/security-advisories/cve-2026-8595 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-8595 · Nota de Segurança