CVE-2026-88967High· 7.7▾ TwilightA user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token (server-side request forgery).
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an attacker-controlled endpoint that disclose the data source's Azure access token (server-side request forgery).
enterprise >= 10.0.0 <= 11.6.16enterprise >= 12.0.0 <= 12.2.10enterprise >= 12.3.0 <= 12.3.11enterprise >= 12.4.0 <= 12.4.13enterprise >= 13.0.0 <= 13.0.11enterprise >= 13.1.0 <= 13.1.8enterprise >= 13.2.0 <= 13.2.4oss >= 10.0.0 <= 11.6.16oss >= 12.0.0 <= 12.2.10oss >= 12.3.0 <= 12.3.11oss >= 12.4.0 <= 12.4.13oss >= 13.0.0 <= 13.0.11oss >= 13.1.0 <= 13.1.8oss >= 13.2.0 <= 13.2.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-100105High· 7.7Alerting contact point authorization bypass via schema downgrade
CVE-2026-88858Medium· 6.5Server-side expression parser denial of service
CVE-2026-103506High· 8.9SSO settings authorization bypass
CVE-2026-16491Medium· 6.5CVE-2026-16491 CVE Record
CVE-2026-92539Medium· 6.7Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise
CVE-2026-9703High· 7.1Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources