PULSE
EN VIVO27señales / 24h
EN
FEED
ransomthegentlemen reclama a Sirl · PT · Not Foundransomthegentlemen reclama a Disney Family · US · Financial Servicesransomqilin reclama a Corporate 360 Business Solutions · CA · Professional Servicesransomqilin reclama a Assos Pharmaceuticals · TR · Healthcareransomqilin reclama a Cano Industrial · MX · Manufacturingransomqilin reclama a Triton Trading · PE · Financial Servicesransomqilin reclama a AppleOne Properties · PH · Not Foundransommoneymessage reclama a Indigo Energy · CA · Energyransomqilin reclama a Sunway Berhad · MY · Hospitality and Tourismransomkairos reclama a LR Reed · AU · Business Servicesransomnova reclama a VNSO · Not Foundransomblacknevas reclama a Zuni Shopping Center, Inc. · US · Consumer Servicesransomqilin reclama a P & A Construction · US · Constructionransombraincipher reclama a windiam.com · Technologyransomthegentlemen reclama a Sirl · PT · Not Foundransomthegentlemen reclama a Disney Family · US · Financial Servicesransomqilin reclama a Corporate 360 Business Solutions · CA · Professional Servicesransomqilin reclama a Assos Pharmaceuticals · TR · Healthcareransomqilin reclama a Cano Industrial · MX · Manufacturingransomqilin reclama a Triton Trading · PE · Financial Servicesransomqilin reclama a AppleOne Properties · PH · Not Foundransommoneymessage reclama a Indigo Energy · CA · Energyransomqilin reclama a Sunway Berhad · MY · Hospitality and Tourismransomkairos reclama a LR Reed · AU · Business Servicesransomnova reclama a VNSO · Not Foundransomblacknevas reclama a Zuni Shopping Center, Inc. · US · Consumer Servicesransomqilin reclama a P & A Construction · US · Constructionransombraincipher reclama a windiam.com · Technology
← Todos los CVEs
CVE Watch23 jul 2026

CVE-2026-21723

The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limit

CVSS

5.3

Medio

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 23 jul 2026 · Última mod.: 23 jul 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.