Threats Tagged 'cve-2026-86472'
View all threats tagged with 'cve-2026-86472'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-86472'
Click on any threat for detailed analysis and mitigation recommendations
A cross-site scripting (XSS) vulnerability exists in DOMPurify when using a non-default IN_PLACE sanitization configuration with an element-removal hook. This flaw allows remote attackers to execute arbitrary JavaScript by supplying specially crafted HTML, bypassing sanitization. The vulnerability affects Red Hat products that use DOMPurify with this specific configuration. Default DOMPurify configurations are not affected. Red Hat has issued an update for Red Hat Hardened Images RPMs including grafana13.2 to address this issue. Join the discussion | GCVE Database | 09/25/2026, 15:11:50 UTC Added: 09/26/2026, 04:51:31 UTC |
A security update for Red Hat Hardened Images includes fixes for vulnerabilities in the grafana13.1 RPM, specifically addressing CVE-2026-61709 and CVE-2026-86472. CVE-2026-61709 is a flaw in OpenFGA's ListUsers API that could cause unauthorized users to be returned in access control decisions when complex authorization rules are used. This vulnerability affects the embedded OpenFGA code in Grafana's experimental Zanzana authorization engine, which is disabled by default in Grafana and Red Hat products. No active exploitation is known, and no product-side mitigation is required if Zanzana remains disabled. A fixed OpenFGA version 1.18.1 or later is available to address the issue. Join the discussion | GCVE Database | 09/23/2026, 18:58:46 UTC Added: 09/17/2026, 01:58:33 UTC |
This update includes the following RPMs: grafana12.4: * grafana12.4-12.4.10-0.4.hum1 (aarch64, x86_64) * grafana12.4-12.4.10-0.4.hum1.src (src) Security Fix(es): grafana12.4: * CVE-2026-86472 Join the discussion | GCVE Database | 09/16/2026, 14:22:20 UTC Added: 07/16/2026, 10:39:53 UTC |
Showing 1 to 3 of 3 results