Linuxsecurity Oracle Grafana and PHP Flaws Prompt Urgent Security Updates
Article Content
- •Two serious PHP vulnerabilities allow code execution without login.
- •Oracle released patches for Grafana versions 9.2.10 and 5.1.1 on 2026-10-23.
- •Affected systems must be updated immediately to prevent exploitation.
Oracle has released updates for Grafana versions 9.2.10 and 5.1.1 due to serious PHP vulnerabilities allowing attackers to execute code without authentication. The updates address CVE-2024-1442, CVE-2026-78667, CVE-2026-78669, and CVE-2026-97031, which were published on 2024-03-07 and 2026-10-08 respectively. Affected systems include various setups running specific PHP versions. Administrators are advised to apply the patches immediately to mitigate potential exploitation. The vulnerabilities are rated high with CVSS scores of 7.5. The updates include email verification enhancements and rebuilding against updated Golang versions. The vulnerabilities could impact a wide range of users if not addressed promptly.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Grafana and CVE-2024-1442 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions of Grafana are affected?
What should I do to protect my systems?
Are these vulnerabilities actively being exploited?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…