NetEye Product Security has rated this update as having a medium security impact.
Topic
An update for the grafana packages is now available for NetEye 4.
Security Fix for NetEye 4.49 and 4.50
grafana-12.4.12_neteye3.31.4-1
Summary
Four medium-severity CVEs were fixed (CVSS 4.3–5.4). Three concern permission scoping: alert rules listable from folders a user may not read (CVE-2026-13719), an Editor able to mark a dashboard as file-provisioned so admins can no longer change or delete it (CVE-2026-13720), and edit rights on one folder allowing dashboards to be moved beyond that scope (CVE-2026-81842). The fourth fixes paused public dashboards keeping a valid access token, letting anyone with the link read dashboard configuration unauthenticated (CVE-2026-81841).
For details on how to apply this update, which includes the changes described in this advisory, refer to the NetEye Update Section in the User Guide.
Important: GLPI security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.50 glpi-11.0.11_neteye1.25.5-1 glpi-autosetup-11.0.11_neteye1.25.5-1 glpi-configurator-11.0.11_neteye1.25.5-1 glpi-neteye-config-11.0.11_neteye1.25.5-1 Summary The list Read More
GLPI: Fix of the upgrade to NetEye 4.50 when custom GLPI plugins are installed During the upgrade to NetEye 4.50, NetEye moves the GLPI plugins that you installed manually out of the folder /usr/share/glpi/plugins. Before this fix, NetEye did not Read More
Tornado: Allow disabling forwarding of local system logs to Tornado By default, rsyslog on NetEye nodes forwards all logs it handles to the Tornado event engine. These include the system logs of the NetEye node itself, which can generate a Read More
Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.50 9.5.5_neteye3.105.3-1 CVEs Elastic Read More
Important: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.50: 26.8.0_neteye1.47.1-1 Summary This Keycloak update (version Read More
