Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-8595

A user with Editor permissions can craft a dashboard whose table (TableNG) panel contains a malicious field name that executes as a script in the browser of any user who views the dashboard (stored cross-site scripting).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 12.6%
CVSS Severity
CVSS v3 Score 6.8
Products affected by CVE-2026-8595
  • Grafana » Grafana » Version: 12.4.0
    cpe:2.3:a:grafana:grafana:12.4.0
  • Grafana » Grafana » Version: 12.4.2
    cpe:2.3:a:grafana:grafana:12.4.2
  • Grafana » Grafana » Version: 12.4.3
    cpe:2.3:a:grafana:grafana:12.4.3
  • Grafana » Grafana » Version: 13.0.0
    cpe:2.3:a:grafana:grafana:13.0.0
  • Grafana » Grafana » Version: 13.0.1
    cpe:2.3:a:grafana:grafana:13.0.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved