Fluid Attacks Database

Description

A flaw in Grafana's API endpoints allows remote attackers to send excessively large request bodies without authentication. This exhausts server memory, resulting in a complete denial of service (DoS).

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel10.0	grafana	<0:10.2.6-26.el10_0	0:10.2.6-26.el10_0
rpm rhel9	grafana	-	-
rpm rhel10	grafana	<0:10.2.6-28.el10_2.4	0:10.2.6-28.el10_2.4

Aliases

1. CVE-2026-333822. NVD-2026-333823. OSV-2026-33382

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.