Skip to content
OpenAdvisories
High ELSA-2026-54184 1 CVE

Important: grafana security update (Oracle Linux 9)

Published Aug 14, 2026 · Updated Aug 14, 2026

Ecosystem: Oracle Linux

Summary

[10.2.6-23.1]
- fix CVE-2026-42127: cap request body size and validate public dashboard access
- Resolves RHEL-219382

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 grafana 0:10.2.6-23.el9_8.1
Oracle Linux · 9 grafana-selinux 0:10.2.6-23.el9_8.1

Vulnerabilities 1

  • High 7.5
    CVE-2026-42127

    Pre-authentication denial of service in the public dashboard query endpoint

    The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exh…

    Grafana Grafana OSS Grafana Enterprise grafana Web / CMS Ubuntu Alpine Wolfi Go