Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
Grafana 12.4 on Red Hat hardened images can be altered
published 1 month ago
Summary
The Grafana version 12.4 package included in Red Hat hardened container images may allow an attacker to modify its code or configuration. This could let them interfere with monitoring data or gain further access. Apply the Red Hat security update for the Grafana package as soon as possible to protect your systems.
What to do
- Update redhat grafana12.4 to version 0:12.4.10-0.5.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | grafana12.4 |
< 0:12.4.10-0.5.hum1 Fix: upgrade to 0:12.4.10-0.5.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
References
- https://access.redhat.com/errata/RHSA-2026:68777 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-81871 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://images.redhat.com/ Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-61709 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68777.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2535473 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-61709 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-61709 Vendor Advisory
- https://github.com/openfga/openfga/commit/171806c93b86bca29e0212ceb8b6ee9c48eb9a... Third Party Advisory
- https://github.com/openfga/openfga/releases/tag/v1.18.1 Third Party Advisory
- https://github.com/openfga/openfga/security/advisories/GHSA-g3pg-frfm-pr2m Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2535725 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-81871 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-81871 Vendor Advisory
- https://github.com/open-telemetry/opentelemetry-go/commit/c65d435b43e5e6b82310e6... Third Party Advisory
- https://github.com/open-telemetry/opentelemetry-go/releases/tag/exporters/otlp/o... Third Party Advisory
- https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w34q... Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published22 Sep 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
RHSA-2026:68777 · OSV
Track software like this
Free during beta