Exploitation ongoing with high activity in latest observed window (3 mentions)
Recommended action window: Immediate (within 24h)
NVD description
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
Our CTI team identified a lot of activities targeting Grafana (CVE-2026-21723) https://vuldb.com/vuln/382465/cti
Post summary
CTI team reports numerous attack activities against Grafana’s CVE‑2026‑21723, indicating active exploitation in the wild.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-21723](https://grafana.com/security/security-advisories/cve-2026-21723) The alertmanage... https://grafana.com/security/security-advisories/cve-2026-21723 #Vulnerability #CVE #ZeroDay
Post summary
The tweet serves to announce the existence of CVE-2026-21723 in Grafana, directing readers to the official advisory link for further details.
CVE-2026-21723 Denial of Service via Unlimited Template Execution in Grafana Alertmanager Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21723
Post summary
The entry notes a DoS vulnerability due to unlimited template execution in Grafana’s alert manager, but provides no PoC, exploit code, evidence of active exploitation, or patch details.