Vulnerabilities CVE-2026-33382

CVE-2026-33382

High

Open

TLP:CLEAR

Denial of service via unbounded request body size

NVD CVE.org

Critical Infrastructure DDoS

AI Analysis

No AI analysis yet.

Description

Several Grafana API endpoints, some of them unauthenticated, do not limit the size of the request body before processing it. An attacker can send very large payloads that force excessive memory allocation, potentially exhausting memory and causing a denial of service.

Details

CVSS Score: 7.5
EPSS Score ⓘ: 0.39%

31.6th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Confidence: 90%
Published: Jul 10, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.