CVE-2026-33375 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-…
Medium CVSS: 6.5

CVE-2026-33375

The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memory exhaustion, crashing the host container.
Vendor
Grafana
Product
Grafana
CWE
CWE-400
Yayın Tarihi
2026-03-26 21:17:05
Güncelleme
2026-03-31 19:01:30
Source Identifier
security@grafana.com
KEV Date Added
-

Kategoriler

CWE-400 Grafana MEDIUM Grafana 2026

Referanslar

https://grafana.com/security/security-advisories/cve-2026-33375