Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-27879
PUBLISHED
More InfoOfficial Page
Assigner-GRAFANA
Assigner Org ID-57da9224-a3e2-4646-9d0e-c4dc2e05e7da
View Known Exploited Vulnerability (KEV) details
Published At-27 Mar, 2026 | 14:28
Updated At-15 Apr, 2026 | 19:25
Rejected At-
▼CVE Numbering Authority (CNA)
Query resampling can cause unbounded memory allocations

A resample query can be used to trigger out-of-memory crashes in Grafana.

Affected Products
Vendor
Grafana LabsGrafana
Product
Grafana
Platforms
  • Cloud
  • OnPrem
Default Status
unaffected
Versions
Affected
  • From 8.0.0 before 11.6.14 (semver)
  • From 12.0.0 before 12.1.10 (semver)
  • From 12.2.0 before 12.2.8 (semver)
  • From 12.3.0 before 12.3.6 (semver)
  • From 12.4.0 before 12.4.2 (semver)
Metrics
VersionBase scoreBase severityVector
3.16.5MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Version: 3.1
Base score: 6.5
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://grafana.com/security/security-advisories/cve-2026-27879
vendor-advisory
Hyperlink: https://grafana.com/security/security-advisories/cve-2026-27879
Resource:
vendor-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-400CWE-400 Uncontrolled Resource Consumption
Type: CWE
CWE ID: CWE-400
Description: CWE-400 Uncontrolled Resource Consumption
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found