Security Advisory

CVE-2026-9029

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-22 13:18:40

Last updated 2026-07-24 12:23:07

Assigner GRAFANA

CVSS score 7.3

State PUBLISHED

Description

A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard (stored cross-site scripting).

← Browse all CVEs View on cve.org ↗