CVE-2026-28375 | Grafana up to 11.6.13/12.1.9/12.2.7/12.3.5/12.4.1 testdata data-source denial of service

A vulnerability has been found in Grafana up to 11.6.13/12.1.9/12.2.7/12.3.5/12.4.1 and classified as problematic. Affected by this issue is some unknown functionality of the component testdata data-source Handler. Performing a manipulation results in denial of service.

This vulnerability is reported as CVE-2026-28375. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.