Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-8609) - Vulnerability Database

Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-8609)

Description

An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).

References

CVE-2026-8609

Related Vulnerabilities

Joomla Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2022-23794) Medium
Common tags: Missing Update Known Vulnerabilities
MySQL CVE-2020-2896 Vulnerability (CVE-2020-2896) Medium
Common tags: Missing Update Known Vulnerabilities
Oracle JRE CVE-2020-2816 Vulnerability (CVE-2020-2816) High
Common tags: Missing Update Known Vulnerabilities
WebLogic CVE-2020-2828 Vulnerability (CVE-2020-2828) High
Common tags: Missing Update Known Vulnerabilities
WebLogic CVE-2020-2829 Vulnerability (CVE-2020-2829) Medium
Common tags: Missing Update Known Vulnerabilities

Severity

High

Classification

CVE-2026-8609
CWE-400
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update
Known Vulnerabilities