CyberSecBulletin

Grafana-cold-storage vulnerabilities

We track 1 vulnerability in Grafana-cold-storage products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Grafana-cold-storage vulnerabilities

  • 9.8 Critical severity

    oncall: Missing Authentication for Critical Functionality

    CVE-2026-63087Grafana-cold-storage

    Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the internal plugin install endpoint using hardcoded default stack_id and org_id values