Beveiligingsadvies

CVE-2026-21723

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-23 01:48:16

Laatst bijgewerkt 2026-08-27 17:22:29

Toegewezen door GRAFANA

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled.

← Alle CVE's bekijken Bekijk op cve.org ↗