Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:47:20 +0000 CVE-2026-27877 — Public dashboards discloses all direct mode datasources https://vulnerability.circl.lu/vuln/cve-2026-27877 <p><strong>Affected:</strong> Grafana, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 8</p> <p>When using public dashboards and direct data-sources, all direct data-sources&#39; passwords are exposed despite not being used in dashboards.</p> <p>No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments&#39; security.</p> <p><strong>Affected:</strong> Grafana, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 8</p> <p>When using public dashboards and direct data-sources, all direct data-sources&#39; passwords are exposed despite not being used in dashboards.</p> <p>No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments&#39; security.</p> https://vulnerability.circl.lu/vuln/cve-2026-27877