Grafana — PoC Archivehttps://poc.intelseclab.com/tags/grafana/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Grafana Enterprise SCIM User ID Collision / Impersonation (CVE-2025-41115)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-41115-grafana-scim-user-impersonation/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-41115-grafana-scim-user-impersonation/Critical severity (CVSS 10) — web · CVE-2025-41115. Status: PoC. Affects: Grafana Enterprise / Grafana Cloud, SCIM provisioning component (/api/scim/v2/Users). Tags: grafana, grafana-enterprise, scim, user-impersonation, privilege-escalation, id-collision, python, docker, cwe-287.webCriticalgrafanagrafana-enterprisescimuser-impersonationprivilege-escalationid-collisionpythondockercwe-287Percona PMM Authenticated RCE via PostgreSQL COPY TO PROGRAM (CVE-2026-25212)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25212-percona-pmm-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25212-percona-pmm-rce/Critical severity (CVSS 9.9) — web · CVE-2026-25212. Status: PoC. Affects: Percona Monitoring and Management (PMM). Tags: rce, percona-pmm, postgresql, copy-to-program, grafana, privilege-escalation, command-execution.webCriticalrcepercona-pmmpostgresqlcopy-to-programgrafanaprivilege-escalationcommand-executionGrafana Dashboard Permissions Broken Access Control — Editor-to-Admin Privilege Escalation (CVE-2026-21721)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21721-grafana-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21721-grafana-lpe/High severity — web · CVE-2026-21721. Status: PoC. Affects: Grafana (self-hosted, dashboard permissions API). Tags: grafana, privilege-escalation, broken-access-control, dashboard-permissions, editor-to-admin, api.webHighgrafanaprivilege-escalationbroken-access-controldashboard-permissionseditor-to-adminapi