CVE-2026-33382

HIGH

7.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2026-07-10

Last Modified2026-07-13

Data SourcesNVD

Vulnerability Description

Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://grafana.com/security/security-advisories/cve-2026-33382

Related Vulnerabilities

CVE-2026-674394.3

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/...

CVE-2026-674386.6

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/execu...

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...