Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-27880 Details

The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.

CVSS 3.x Severity and Vector Strings:

CNA: redhat-SADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://access.redhat.com/security/cve/CVE-2026-27880	redhat-SADP
https://bugzilla.redhat.com/show_bug.cgi?id=2452295	redhat-SADP
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27880.json	redhat-SADP
https://grafana.com/security/security-advisories/cve-2026-27880	CISA-ADP	Vendor Advisory
https://grafana.com/security/security-advisories/cve-2026-27880	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-787	Out-of-bounds Write	[email protected]
CWE-125	Out-of-bounds Read	CISA-ADP
CWE-770	Allocation of Resources Without Limits or Throttling	redhat-SADP

Product	Versions
grafana grafana	< 12.1.0 >= 12.1.10, < 12.2.0 >= 12.2.8, < 12.3.0 >= 12.3.6, < 12.4.0
CPE cpe:2.3:a:grafana:grafana:::::::: Remediation No remediation found in references.

9 change records found show changes

QUICK INFO