CVE-2026-8609

MEDIUM

5.3

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2026-07-10

Last Modified2026-07-13

Data SourcesNVD

Vulnerability Description

An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://grafana.com/security/security-advisories/cve-2026-8609

相关漏洞威胁

CVE-2026-674394.3

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/...

CVE-2026-674386.6

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/execu...

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...