{"metadata": {"vulnerability": "CVE-2026-27876", "count": 79, "kinds": {"milestone": 12, "sighting": 25, "kev": 0, "other": 42}}, "data": [{"timestamp": "2026-02-24T14:30:17.726Z", "date_only": false, "value": "2026-02-24T14:30:17.726Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-27876", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0359", "record": "CERTFR-2026-AVI-0359", "field": "last_revision_date"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": true, "value": "2026-03-26", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0359", "record": "CERTFR-2026-AVI-0359", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0359", "record": "CERTFR-2026-AVI-0359", "field": "revisions.0.revision_date"}, {"timestamp": "2026-03-26T14:40:27.951Z", "date_only": false, "value": "2026-03-26T14:40:27.951808Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtisjcsf26", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "505adfeb-5e09-4282-848b-a5d5a3de08bb", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtisjcsf26"}, {"timestamp": "2026-03-26T19:34:03Z", "date_only": false, "value": "2026-03-26T19:34:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-285", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "83b35511-da6e-4120-9fee-7b8e3dd82e0d", "url": "https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-285"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-27876", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-27876", "record": "FKIE_CVE-2026-27876", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-27T14:21:53.858Z", "date_only": false, "value": "2026-03-27T14:21:53.858Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / GRAFANA", "record": "CVE-2026-27876", "field": "containers.cna.datePublic"}, {"timestamp": "2026-03-27T14:24:36.771Z", "date_only": false, "value": "2026-03-27T14:24:36.771Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-27876", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-03-27T14:24:36.771Z", "date_only": false, "value": "2026-03-27T14:24:36.771Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-27876", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-03-27T14:24:36.771Z", "date_only": false, "value": "2026-03-27T14:24:36.771Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-27876", "field": "containers.adp.1.timeline.1.time"}, {"timestamp": "2026-03-27T15:02:27.980Z", "date_only": false, "value": "2026-03-27T15:02:27.980Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-27876", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-03-27T15:16:00Z", "date_only": false, "value": "2026-03-27T15:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-27876", "record": "UBUNTU-CVE-2026-27876", "field": "published"}, {"timestamp": "2026-03-27T15:16:50Z", "date_only": false, "value": "2026-03-27T15:16:50Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-736H-475M-XHJC", "record": "GHSA-736H-475M-XHJC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-03-27T15:16:50.920Z", "date_only": false, "value": "2026-03-27T15:16:50.920", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-27876", "record": "FKIE_CVE-2026-27876", "field": "published"}, {"timestamp": "2026-03-27T15:30:25Z", "date_only": false, "value": "2026-03-27T15:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-736H-475M-XHJC", "record": "GHSA-736H-475M-XHJC", "field": "published"}, {"timestamp": "2026-03-27T15:30:25Z", "date_only": false, "value": "2026-03-27T15:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-736H-475M-XHJC", "record": "GHSA-736H-475M-XHJC", "field": "modified"}, {"timestamp": "2026-03-27T17:22:21Z", "date_only": false, "value": "2026-03-27T17:22:21.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/YkFovyOp1l89l2HrsHhU-e8kv9HXA0gCdui6VpSIt8SuiME", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "66b5cb6e-fd73-4aec-a9c0-dae3646f39ef"}, {"timestamp": "2026-03-27T23:23:17.631Z", "date_only": false, "value": "2026-03-27T23:23:17.631600Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3b6le47k2j", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "af110c92-88cd-4719-b09b-0894ad648072", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mi3b6le47k2j"}, {"timestamp": "2026-03-28T03:55:48.690Z", "date_only": false, "value": "2026-03-28T03:55:48.690Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-27876", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-28T14:40:04.151Z", "date_only": false, "value": "2026-03-28T14:40:04.151188Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mi4ufvf7gk2p", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "90b59c0d-26fc-4e76-a66c-617bf48c31fa", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mi4ufvf7gk2p"}, {"timestamp": "2026-03-29T03:44:30.118Z", "date_only": false, "value": "2026-03-29T03:44:30.118584Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/breachandbuild.bsky.social/post/3mi6aalkoof2h", "record": "cve-2026-27876", "field": "creation_timestamp", "uuid": "7a75e615-af5b-43d9-b592-a245dc017646", "url": "https://bsky.app/profile/breachandbuild.bsky.social/post/3mi6aalkoof2h"}, {"timestamp": "2026-03-29T17:00:00Z", "date_only": false, "value": "2026-03-29T17:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "1edf1e1b-1157-451e-9540-4e27e4eb9b8a", "url": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/"}, {"timestamp": "2026-03-29T22:00:00Z", "date_only": false, "value": "2026-03-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-03-29T22:00:00Z", "date_only": false, "value": "2026-03-29T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-03-29T22:00:00Z", "date_only": false, "value": "2026-03-29T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-03-30T14:35:49Z", "date_only": false, "value": "2026-03-30T14:35:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3042", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "1ef89d13-cf56-4e90-ae73-a2f31a0a5752", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 SQL Expressions \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f Grafana \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432\n\nBDU:2026-04159\nCVE-2026-27876\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u0438 SQL Expressions;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0445\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u00ab\u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c\u00bb;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (VPN);\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://grafana.com/blog/grafana-security-release-critical-and-high-severity-security-fixes-for-cve-2026-27876-and-cve-2026-27880/", "url": "https://t.me/bdufstecru/3042"}, {"timestamp": "2026-03-30T15:00:06Z", "date_only": false, "value": "2026-03-30T15:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/77990", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "eb4f0f26-ff90-4c59-b8e2-e67b6733afa8", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27876\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-30 14:50:52\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-27876\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/77990"}, {"timestamp": "2026-03-30T19:10:23Z", "date_only": false, "value": "2026-03-30T19:10:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-injection-vulnerabilities-grafana-patch-immediately", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "12ca8074-d802-4cb7-9573-a5b3e1072a72", "url": "https://ccb.belgium.be/advisories/warning-remote-code-execution-injection-vulnerabilities-grafana-patch-immediately"}, {"timestamp": "2026-03-30T21:00:05Z", "date_only": false, "value": "2026-03-30T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/GaMGzk6quMfkMjAkzI4lSk6nx3GpyIi67KywiajpwVCnbkI", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "36b0bd92-850f-4bdf-a18d-a283aeb49b36"}, {"timestamp": "2026-03-31T02:00:04Z", "date_only": false, "value": "2026-03-31T02:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://grafana.com/security/security-advisories/cve-2026-27876/", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "6f673c38-d98d-4d0b-8526-c6cd35c97b0c", "url": "https://grafana.com/security/security-advisories/cve-2026-27876/"}, {"timestamp": "2026-03-31T02:35:18.469Z", "date_only": false, "value": "2026-03-31T02:35:18.469303Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mid5cpawdd24", "record": "cve-2026-27876", "field": "creation_timestamp", "uuid": "bc5429c8-d5c2-4b64-8fbe-b0f6d2a56328", "url": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3mid5cpawdd24"}, {"timestamp": "2026-03-31T21:20:08.865Z", "date_only": false, "value": "2026-03-31T21:20:08.865803Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mif463qs3c2r", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "affda5fb-4188-40ae-8900-28ae0d6abf85", "url": "https://bsky.app/profile/cyberhub.blog/post/3mif463qs3c2r"}, {"timestamp": "2026-04-01T08:41:07.673Z", "date_only": false, "value": "2026-04-01T08:41:07.673Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GRAFANA-2026-27876", "record": "BIT-GRAFANA-2026-27876", "field": "published"}, {"timestamp": "2026-04-06T01:56:26.707Z", "date_only": false, "value": "2026-04-06T01:56:26.707806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mis5wqsesg2i", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "6e0f6495-81ed-4b99-93d1-b31f840b239e", "url": "https://bsky.app/profile/opsmatters.com/post/3mis5wqsesg2i"}, {"timestamp": "2026-04-21T09:26:09Z", "date_only": false, "value": "2026-04-21T09:26:09Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:1524-1", "record": "SUSE-SU-2026:1524-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-21T09:26:09Z", "date_only": false, "value": "2026-04-21T09:26:09Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:1524-1", "record": "SUSE-SU-2026:1524-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-04-21T09:26:09Z", "date_only": false, "value": "2026-04-21T09:26:09Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:1524-1", "record": "SUSE-SU-2026:1524-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-21T09:26:09Z", "date_only": false, "value": "2026-04-21T09:26:09Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:1524-1", "record": "SUSE-SU-2026:1524-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-21T09:26:09Z", "date_only": false, "value": "2026-04-21T09:26:09Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:1524-1", "record": "SUSE-SU-2026:1524-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10601-1", "record": "OPENSUSE-SU-2026:10601-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10601-1", "record": "OPENSUSE-SU-2026:10601-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10601-1", "record": "OPENSUSE-SU-2026:10601-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10601-1", "record": "OPENSUSE-SU-2026:10601-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:10601-1", "record": "OPENSUSE-SU-2026:10601-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-23T22:00:00Z", "date_only": false, "value": "2026-04-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-04-27T22:00:00Z", "date_only": false, "value": "2026-04-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-04-28T22:00:00Z", "date_only": false, "value": "2026-04-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-04-30T19:10:31.384Z", "date_only": false, "value": "2026-04-30T19:10:31.384117Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkqcvt7zoc25", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "882349d1-8bca-40dd-bbb3-b7429867236c", "content": "Another critical Grafana security update landed in openSUSE Leap. The RCE (CVE-2026-27876) lets attackers turn Viewer accounts into full host access. Read more -> tinyurl.com/mstzsfc3  #openSUSE", "url": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkqcvt7zoc25"}, {"timestamp": "2026-05-19T22:00:00Z", "date_only": false, "value": "2026-05-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-06-03T14:10:38Z", "date_only": false, "value": "2026-06-03T14:10:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2243-1", "record": "SUSE-SU-2026:2243-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-03T14:10:38Z", "date_only": false, "value": "2026-06-03T14:10:38Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2243-1", "record": "SUSE-SU-2026:2243-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-03T14:10:38Z", "date_only": false, "value": "2026-06-03T14:10:38Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2243-1", "record": "SUSE-SU-2026:2243-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-03T14:10:38Z", "date_only": false, "value": "2026-06-03T14:10:38Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2243-1", "record": "SUSE-SU-2026:2243-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-03T14:10:38Z", "date_only": false, "value": "2026-06-03T14:10:38Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2243-1", "record": "SUSE-SU-2026:2243-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-03T14:22:06Z", "date_only": false, "value": "2026-06-03T14:22:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2026:2258-1", "record": "SUSE-SU-2026:2258-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-03T14:22:06Z", "date_only": false, "value": "2026-06-03T14:22:06Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2026:2258-1", "record": "SUSE-SU-2026:2258-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-06-03T14:22:06Z", "date_only": false, "value": "2026-06-03T14:22:06Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2258-1", "record": "SUSE-SU-2026:2258-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-03T14:22:06Z", "date_only": false, "value": "2026-06-03T14:22:06Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2026:2258-1", "record": "SUSE-SU-2026:2258-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-03T14:22:06Z", "date_only": false, "value": "2026-06-03T14:22:06Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2026:2258-1", "record": "SUSE-SU-2026:2258-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-04T22:00:00Z", "date_only": false, "value": "2026-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-06-04T22:00:00Z", "date_only": false, "value": "2026-06-04T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-05T08:34:12.932Z", "date_only": false, "value": "2026-06-05T08:34:12.932+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0899", "record": "WID-SEC-W-2026-0899", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-29T11:30:19Z", "date_only": false, "value": "2026-06-29T11:30:19Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-27876", "record": "UBUNTU-CVE-2026-27876", "field": "modified"}, {"timestamp": "2026-07-15T01:12:42.765Z", "date_only": false, "value": "2026-07-15T01:12:42.765Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-27876", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-15T02:19:11.617Z", "date_only": false, "value": "2026-07-15T02:19:11.617", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-27876", "record": "FKIE_CVE-2026-27876", "field": "lastModified"}, {"timestamp": "2026-07-16T21:00:03.663Z", "date_only": false, "value": "2026-07-16T21:00:03.663819Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pfZkWNTfSl0QlMaAnHdvezr7JcbQg-hIVsmkdcHo3GtCjg", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "1efdfd42-d97c-4913-b29c-3b5242fccf86"}, {"timestamp": "2026-07-17T00:00:10.702Z", "date_only": false, "value": "2026-07-17T00:00:10.702713Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pfZkWNTfSl0QlMaAnHdvezr7JcbQg-hIVsmkdcHo3GtCjg", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "ad08d659-388b-403f-8ed2-8fc31142618a"}, {"timestamp": "2026-07-19T16:00:10.930Z", "date_only": false, "value": "2026-07-19T16:00:10.930481Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1700", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "70d6984d-5346-4ca4-9092-f8ec49f5404c", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-27876: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Grafana \u0447\u0435\u0440\u0435\u0437 SQL Expressions", "url": "https://t.me/critical_bug/1700"}, {"timestamp": "2026-07-19T16:00:10.969Z", "date_only": false, "value": "2026-07-19T16:00:10.969721Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1701", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "908c980b-61d5-4c4e-8ee7-73fb37ca07eb", "content": "\ud83d\udea8 CVE-2026-27876 \ud83d\udd34 CVSS: 9.1 Critical\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Grafana \u0447\u0435\u0440\u0435\u0437 SQL Expressions!\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 Viewer \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0441\u0442\u0435 \u043d\u0438\u0436\u0435 \ud83d\udc47", "url": "https://t.me/critical_bug/1701"}, {"timestamp": "2026-07-19T16:00:11.005Z", "date_only": false, "value": "2026-07-19T16:00:11.005856Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1702", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "4689233e-0540-4c4a-a760-2c466ad308c4", "content": "\ud83d\udea8 \u041d\u043e\u0432\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Grafana: \u043e\u0442 SQL \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0445\u043e\u0441\u0442\u0430! \ud83d\udea8\n\nCVE-2026-27876 \ud83d\udd34 CVSS: 9.1 Critical\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Grafana \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u043b\u0438 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 (RCE). \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f sqlExpressions \u0432 Grafana \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430 \u0434\u043b\u044f \u0442\u0440\u0430\u043d\u0441\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 SQL. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a: \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83c\udfaf \u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442:\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u043f\u0440\u0430\u0432\u0430 Viewer (\u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430) \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e sqlExpressions. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SQL-\u0437\u0430\u043f\u0440\u043e\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Sqlyze \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 AWS.\n\n\u041a\u043e\u0433\u0434\u0430 Grafana \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u043b\u0430\u0433\u0438\u043d, \u043e\u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u0434 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Grafana. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0435 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0445\u043e\u0441\u0442\u043e\u043c! \ud83e\udd2f\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Grafana \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (12.4.2, 12.3.6, 12.2.8, 12.1.10, 11.6.14).\n2\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u044e sqlExpressions \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Grafana.\n3\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f Sqlyze, \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0435\u0433\u043e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.5.0 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435.\n4\ufe0f\u20e3 \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u0441\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 AWS.\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u0434\u0435\u0442\u0430\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Grafana #CVE #ZeroDay #RCE #CyberSecurity #Infosec #critical_bug", "url": "https://t.me/critical_bug/1702"}, {"timestamp": "2026-07-20T00:00:06.294Z", "date_only": false, "value": "2026-07-20T00:00:06.294410Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1702", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "b32b2210-7581-41b6-81af-89e7d08dd8cd", "content": "\ud83d\udea8 \u041d\u043e\u0432\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Grafana: \u043e\u0442 SQL \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0445\u043e\u0441\u0442\u0430! \ud83d\udea8\n\nCVE-2026-27876 \ud83d\udd34 CVSS: 9.1 Critical\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 Grafana \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u043b\u0438 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 (RCE). \ud83d\ude31\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f sqlExpressions \u0432 Grafana \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430 \u0434\u043b\u044f \u0442\u0440\u0430\u043d\u0441\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 SQL. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a: \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83c\udfaf \u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442:\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u043f\u0440\u0430\u0432\u0430 Viewer (\u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430) \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e sqlExpressions. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SQL-\u0437\u0430\u043f\u0440\u043e\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044c \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 Sqlyze \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 AWS.\n\n\u041a\u043e\u0433\u0434\u0430 Grafana \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u043b\u0430\u0433\u0438\u043d, \u043e\u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u0434 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Grafana. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0435 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0445\u043e\u0441\u0442\u043e\u043c! \ud83e\udd2f\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Grafana \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (12.4.2, 12.3.6, 12.2.8, 12.1.10, 11.6.14).\n2\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u044e sqlExpressions \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Grafana.\n3\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f Sqlyze, \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0435\u0433\u043e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.5.0 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435.\n4\ufe0f\u20e3 \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u0441\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 AWS.\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u0434\u0435\u0442\u0430\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Grafana #CVE #ZeroDay #RCE #CyberSecurity #Infosec #critical_bug", "url": "https://t.me/critical_bug/1702"}, {"timestamp": "2026-07-20T00:00:06.578Z", "date_only": false, "value": "2026-07-20T00:00:06.578106Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1700", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "7169df49-8a6f-473f-9dcd-ac6d3f0a2b43", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-27876: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Grafana \u0447\u0435\u0440\u0435\u0437 SQL Expressions", "url": "https://t.me/critical_bug/1700"}, {"timestamp": "2026-08-27T17:22:25.648Z", "date_only": false, "value": "2026-08-27T17:22:25.648Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-27876", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-27T17:22:25.648Z", "date_only": false, "value": "2026-08-27T17:22:25.648Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GRAFANA", "record": "CVE-2026-27876", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-06T01:00:05.407Z", "date_only": false, "value": "2026-09-06T01:00:05.407156Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/101307", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "b0753462-4b32-487c-b746-7c1b6de905c2", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-27876\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a atiilla\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 23:50:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGrafana SQL Expressions Arbitrary File Write to RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/101307"}, {"timestamp": "2026-09-06T12:00:06.559Z", "date_only": false, "value": "2026-09-06T12:00:06.559172Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0fB2wFx9rVMAPFy-F0wBOZ1Zwfkp3PdEKRrfYNzbjLXap34", "record": "CVE-2026-27876", "field": "creation_timestamp", "uuid": "2ce8db43-af7e-4309-bf41-763cca1a3d86"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GRAFANA-2026-27876", "record": "BIT-GRAFANA-2026-27876", "field": "modified"}]}