CVE-2026-92539 | Grafana up to 13.2.3 SCIM API resource injection

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Grafana up to 12.3.11/12.4.12/13.0.10/13.1.7/13.2.3. Affected by this vulnerability is an unknown functionality of the component SCIM API. The manipulation results in improper control of resource identifiers.

This vulnerability was named CVE-2026-92539. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More