CVE-2026-80221

{}

{}

{}

{"bugzilla": {"description": "grafana-global-hub: grafana-global-hub: Direct database connection string with embedded credentials passed as environment variable", "id": "2518333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518333"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-312", "details": ["No description is available for this CVE."], "name": "CVE-2026-80221", "package_state": [{"cpe": "cpe:/a:redhat:multicluster_globalhub", "fix_state": "Affected", "impact": "important", "package_name": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9", "product_name": "Multicluster Global Hub"}], "public_date": "2026-08-31T13:48:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-80221\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-80221"], "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": null}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "product": "global_hub", "vendor": "grafana"}], "created": "2026-09-01T15:00:11.893447+00:00", "updated": "2026-09-02T22:09:47.854492+00:00", "vendors": ["grafana", "grafana$PRODUCT$global_hub"]}