Medium WID-SEC-2026-4002 1 CVE

Grafana: Schwachstelle ermöglicht Manipulation von Daten

Published Oct 15, 2026 · Updated Oct 15, 2026 · de-DE

Vendor: Grafana Product: Grafana Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um Daten zu manipulieren.

Product

Grafana ist eine Analyse- und Visualisierungssoftware.

Vulnerabilities 1

High 7.1

CVE-2026-9703

Viewer role can create, modify and delete Loki alerting rules

Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer role on an affected Grafana instance could send POST, PUT and DELETE requests through the proxy to the Loki ru…

Grafana Grafana OSS Grafana Enterprise Web / CMS

Oct 15, 2026

Revision history

2026-10-15 #1
Initiale Fassung

References

Grafana Security Advisory vom 2026-10-15
https://grafana.com/security/security-advisories/cve-2026-9703