[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_c7-aHkoSCWheasKy9pmCUTx9FCxcHQjNzP9SZVB7Cg":3,"g5a-risk:CVE-2022-26148":151},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":42,"affectedProducts":43,"affectedProductsCount":62,"references":63,"referencesCount":74,"weaknesses":75,"weaknessesCount":84,"isActivelyExploited":85,"cisaInfo":27,"otxData":27,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":133,"notableEvents":134},"CVE-2022-26148","What is CVE-2022-26148?","An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in api_jsonrpc.php to discover the Zabbix account password and URL address.","An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When...","2022-03-21T20:15:14.03","2022-05-13T11:59:17.243",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.52507,[41,41,39,39,39,39,39],0.53439,"Critical",[44,48,53,56,59],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"grafana","*","cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"redhat","ceph_storage","3.0","cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"4.0","cpe:2.3:a:redhat:ceph_storage:4.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"5.0","cpe:2.3:a:redhat:ceph_storage:5.0:*:*:*:*:*:*:*",{"vendor":49,"product":60,"version":51,"criteria":61,"vulnerable":4},"storage","cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*",5,[64,70],{"url":65,"source":66,"tags":67},"https:\u002F\u002F2k8.org\u002Fpost-319.html","2k8",[68,69],"Exploit","Third Party Advisory",{"url":71,"source":72,"tags":73},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20220425-0005\u002F","Netapp",[69],2,[76],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-312","Cleartext Storage of Sensitive Information","The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.","Because the information is stored in cleartext (i.e., unencrypted), attackers could potentially read it. Even if the information is encoded in a way that is not human-readable, certain techniques could determine which encoding is being used, then decode the information.\nWhen organizations adopt cloud services, it can be easier for attackers to access the data from anywhere on the Internet.\nIn some systems\u002Fenvironments such as cloud, the use of \"double encryption\" (at both the software and hardware layer) might be required, and the developer might be solely responsible for both layers, instead of shared responsibility with the administrator of the broader system\u002Fenvironment.","Draft","Base","Simple",1,false,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2022-26148? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-26148, a critical severity cyber security vulnerability from 2022. High exploit probability (52.5%). An issue was discover...","CVE-2022-26148, CVE-2022-26148 vulnerability, CVE-2022-26148 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, grafana security, redhat security, grafana vulnerability, ceph_storage vulnerability, storage vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2022-26148",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-26148","Cybersecurity","CVE-2022-26148, CVE-2022-26148 vulnerability, CVE-2022-26148 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113,121],{"Operator":27,"Negate":27,"Nodes":114},[115],{"Operator":116,"Negate":27,"CPEMatch":117},"OR",[118],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":119,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":120},"D1352981-B332-49A3-B925-BBBB14778647","7.3.4",{"Operator":27,"Negate":27,"Nodes":122},[123],{"Operator":116,"Negate":27,"CPEMatch":124},[125,127,129,131],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"516F4E8E-ED2F-4282-9DAB-D8B378F61258",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":128,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D6E54096-5D45-4CB2-AC9A-DDB55BF2B94C",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":130,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4E37E1B3-6F68-4502-85D6-68333643BDFF",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":132,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"379A5883-F6DF-41F5-9403-8D17F6605737",[],[135,142],{"id":136,"eventType":137,"eventTime":138,"details":139,"label":140,"color":141},"a3285748-b30d-4e6c-9f48-6daf70c70612","LOW_EPSS_DELTA","2025-11-19T04:05:43.116501+00:00","Daily EPSS score decreased by 0.308 on 2023-12-30","EPSS Score Decreased","green",{"id":143,"eventType":144,"eventTime":145,"details":146,"label":147,"color":148},"9eca2193-9275-47c9-a475-0cb27a406d82","HIGH_EPSS_DELTA","2025-11-22T04:05:31.950277+00:00","Daily EPSS score increased by 0.308 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":150,"version":33},1792261697917,{"score":152,"band":153,"action":154,"scoredAt":155},63,"Medium","Plan remediation","2026-10-16T06:53:52.961726+00:00"]