Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Grafana Allocation of Resources Without Limits or Throttling Vulnerability - CVE-2026-28383 - Vulnerability Database
Grafana

Grafana Allocation of Resources Without Limits or Throttling Vulnerability - CVE-2026-28383

Medium
Reference: CVE-2026-28383
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-28383
Title: Grafana Allocation of Resources Without Limits or Throttling Vulnerability
Overview:

A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory. An authenticated user can exploit this to trigger an out-of-memory condition potentially causing a denial of service.