NetEye Product Security has rated this update as having a medium security impact.
Topic
An update for the grafana packages is now available for NetEye 4.
Security Fix for NetEye 4.49 and 4.50
grafana-12.4.12_neteye3.31.4-1
Summary
Four medium-severity CVEs were fixed (CVSS 4.3–5.4). Three concern permission scoping: alert rules listable from folders a user may not read (CVE-2026-13719), an Editor able to mark a dashboard as file-provisioned so admins can no longer change or delete it (CVE-2026-13720), and edit rights on one folder allowing dashboards to be moved beyond that scope (CVE-2026-81842). The fourth fixes paused public dashboards keeping a valid access token, letting anyone with the link read dashboard configuration unauthenticated (CVE-2026-81841).
For details on how to apply this update, which includes the changes described in this advisory, refer to the NetEye Update Section in the User Guide.
Fixes for nginx and nginx-satellite We identified and fixed two issues affecting nginx resource management during service and resource restarts. nginx-satellite.service An issue could leave nginx worker processes running after nginx-satellite.service entered a failed state. These processes could continue listening Read More
When the GLPI inventory plugin is used to collect agent inventories, assets may fail to appear in GLPI even though the agents reach the server. The cause was a bug in the Icinga Web 2 SSO plugin: GLPI 11 marks Read More
Keycloak: Fix for Oversized Logout URL and Package Update This update addresses an issue where the logout redirect URL became excessively large, leading to failed logouts and HTTP 500 errors. When users belonged to a large number of groups, the Read More
Important: GLPI security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.49 glpi-11.0.9_neteye1.20.3-2 glpi-autosetup-11.0.9_neteye1.20.3-2 glpi-configurator-11.0.9_neteye1.20.3-2 Summary This is the Read More
Important: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.49: 26.7.4_neteye1.46.1-1 Summary This Keycloak update (version Read More
