NetEye Product Security has rated this update as having a medium security impact.
Topic
An update for the grafana packages is now available for NetEye 4.
Security Fix for NetEye 4.49 and 4.50
grafana-12.4.12_neteye3.31.4-1
Summary
Four medium-severity CVEs were fixed (CVSS 4.3–5.4). Three concern permission scoping: alert rules listable from folders a user may not read (CVE-2026-13719), an Editor able to mark a dashboard as file-provisioned so admins can no longer change or delete it (CVE-2026-13720), and edit rights on one folder allowing dashboards to be moved beyond that scope (CVE-2026-81842). The fourth fixes paused public dashboards keeping a valid access token, letting anyone with the link read dashboard configuration unauthenticated (CVE-2026-81841).
For details on how to apply this update, which includes the changes described in this advisory, refer to the NetEye Update Section in the User Guide.
Important: Grafana security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic Updates for the grafana packages are now available for NetEye 4. Security Fix for NetEye 4.50 12.4.13_neteye3.31.5-1 CVEs CVE-2026-15577CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2026-33374CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-93294CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N Read More
RKE2: Fix of the upgrade to NetEye 4.49 and NetEye 4.50 fresh installations During an upgrade to NetEye 4.49 or a fresh installation of NetEye 4.50, the configuration of the RKE2 service could cause PCS to report all *_virt_ip resources Read More
Graph titles no longer disappear We fixed an issue where graph titles on ICW2 dashboards disappeared a few seconds after the page loaded.Graph titles now remain visible as expected. List of updated packages To solve the issue mentioned above, the Read More
Important: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.50: 26.8.1_neteye1.47.2-1 CVEs CVE-2026-94000CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2026-94001CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVE-2026-97177CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2026-94215CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L Read More
Important: GLPI security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.50 glpi-11.0.11_neteye1.25.5-1 glpi-autosetup-11.0.11_neteye1.25.5-1 glpi-configurator-11.0.11_neteye1.25.5-1 glpi-neteye-config-11.0.11_neteye1.25.5-1 Summary The list Read More
