Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Grafana 12.4 on Red Hat could be altered by attackers
published 1 month ago
Summary
The Grafana version 12.4 packages included in Red Hat hardened images contain a weakness that could let an attacker modify the software or its settings. This could lead to unintended behavior or expose sensitive data. Apply the latest Red Hat security update for Grafana as soon as possible to fix the issue.
What to do
- Update redhat grafana12.4 to version 0:12.4.10-0.8.hum1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:hummingbird:1 | redhat | grafana12.4 |
< 0:12.4.10-0.8.hum1 Fix: upgrade to 0:12.4.10-0.8.hum1
|
Original advisory text
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
References
- https://access.redhat.com/errata/RHSA-2026:72116 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-9496 Third Party Advisory
- https://access.redhat.com/security/updates/classification/ Third Party Advisory
- https://images.redhat.com/ Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72116.... Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2481394 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-9496 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-9496 Vendor Advisory
- https://github.com/npm/pacote/blob/9d7459440826ab4cf962ef98d8f3fd0c4d464b5c/lib/... Third Party Advisory
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16874025 Third Party Advisory
- https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published26 Sep 2026
Updated30 Sep 2026
First seen30 Sep 2026
Sources
RHSA-2026:72116 · OSV
Track software like this
Free during beta