VULNERABILITY INTELLIGENCE

CVE-2026-28376

CVSS score6.5 MEDIUM

EPSS probability0.33%

CISA KEVNot currently listed

Published2026-05-13

Last modified2026-10-26

Description

The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions. An authenticated user with access to the Grafana Live API can trigger this issue.