PT-2026-3010 · Grafana · Grafana

Published 2026-01-15 · Updated 2026-01-20 · CVE-2026-22643

Positive Technologies (AI Summary)

CVSS v2.0

8.7

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 11.6.2

Description An excessively long dashboard title or panel name can cause Chromium browsers to become unresponsive due to improper input validation.

Recommendations Update to Grafana version 11.6.2 or higher.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-00583

CVE-2026-22643

Affected Products

Grafana

References · 11

• https://sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22643 · Security Note
• https://bdu.fstec.ru/vul/2026-00583 · Security Note
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://sick.com/psirt · Note
• https://twitter.com/CVEnew/status/2011926127338766813 · Twitter Post
• https://first.org/cvss/calculator/3.1 · Note
• https://twitter.com/cracbot/status/2013567231675023746 · Twitter Post
• https://twitter.com/TheHackerWire/status/2011811179375530487 · Twitter Post
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Note
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0002.json · Note