CVE-2026-63087 – Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint
CVE ID :CVE-2026-63087 Published : July 16, 2026, 5:16 p.m. | 1 hour, 52 minutes ago Description :Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allows remote attackers to obtain a valid PluginAuthToken by sending a POST request to the…
