CERT24CVE-2026-8595 — Stored XSS in the TableNG table panelLoading data…
CERT24Threat Observatory
Period

CVE-2026-8595 — Stored XSS in the TableNG table panel

A Grafana flaw allows an authenticated user with Editor permissions to insert a malicious script into a TableNG table panel field name. When a compromised dashboard is viewed, the script executes in the viewer’s browser.

← Back to intelligence

CVE-2026-8595 — Stored XSS in the TableNG table panel

A Grafana flaw allows an authenticated user with Editor permissions to insert a malicious script into a TableNG table panel field name. When a compromised dashboard is viewed, the script executes in the viewer’s browser.