grafana-cold-storage

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

grafana-cold-storage records in CISA KEV

No grafana-cold-storage vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-45037 CVE-2026-63087 · GHSA-whw8-2869-jf7j

Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint

MEDIUM 49

Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardc…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00712 Published 2026-07-16 No fix listed CWE-306

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0