Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ Vulnerabilidades en productos Grafana ❗ CVE-2026-42129 ❗ CVE-2026-42127 ❗ CVE-2026-28381 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-grafana-3/ https://t.co/v2oT4mgkhB
Post summary
The post lists three Grafana CVEs and provides links for additional information, without detailing exploits, patches, or technical specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | grafana | grafana | - | - | - |