Threats Tagged 'cve-2026-9765'

Red Hat has released a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana13.1 package to version 13.1.3-0.5.hum1. This update addresses multiple security vulnerabilities including CVE-2026-8595 and others. The advisory covers both aarch64 and x86_64 architectures. The update is a bug fix and enhancement release.

A vulnerability in the Node.js qs library causes qs.stringify to throw a TypeError when serializing an object whose own constructor property has a truthy, non-callable isBuffer member. Red Hat has issued an advisory for Red Hat Hardened Images RPMs, including an update to the grafana13.2 package, addressing this and other vulnerabilities. The update is available and should be applied to affected systems. No active exploitation has been reported.

CVE-2026-9765 is a high-severity vulnerability in Grafana IRM version 1.0.0 involving broken access controls. This flaw allows users with limited privileges to bypass access control mechanisms and gain unauthorized access to resources or perform actions beyond their permissions. The vulnerability can lead to unauthorized data access, privilege escalation attempts, and potential account takeovers. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.