Grafana vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
67 matching records
- UnknownCVE-2026-88967 is listed by Grafana: Mehrere Schwachstellen.Check if you run itEPSS 0.29%Oct 29, 2026
- Medium5.9grafana: OAuth and OIDC tokens written unredacted to Grafana server logsCheck if you run itEPSS 0.16%Oct 29, 2026
- High8.9SSO settings authorization bypassCheck if you run itEPSS 0.27%Oct 28, 2026
- Medium6.5Server-side expression parser denial of serviceCheck if you run itEPSS 0.34%Oct 28, 2026
- High7.7Alerting contact point authorization bypass via schema downgradeCheck if you run itEPSS 0.29%Oct 28, 2026
- UnknownCGA-f2wj-cjh5-w527Open the advisoryOct 28, 2026
- High7.5Important: grafana-pcp security updateOpen the advisoryOct 23, 2026
- UnknownCritical: grafana-pcp security updateOpen the advisoryOct 22, 2026
- UnknownImportant: grafana-pcp security updateOpen the advisoryOct 22, 2026
- UnknownImportant: grafana security updateOpen the advisoryOct 22, 2026
- UnknownCGA-jhq8-34vv-5733Open the advisoryOct 21, 2026
- UnknownCGA-gc7r-4v3v-ggfhOpen the advisoryOct 21, 2026
- Medium6.7A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on the same Grafana i…Check if you run itEPSS 0.34%Oct 20, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 20, 2026
- UnknownSecurity update for grafanaOpen the advisoryOct 19, 2026
- Medium5.3Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 18, 2026
- Medium5.3Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 18, 2026
- Medium5.3Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisoryOct 18, 2026
- High7.1Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources.Check if you run itEPSS 0.19%Oct 15, 2026
- UnknownImportant: grafana security updateOpen the advisoryOct 15, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryOct 10, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryOct 6, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryOct 6, 2026
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateOpen the advisorySep 9, 2026
- High7.7A server-side request forgery (SSRF) vulnerability was found in multiple AWX notification backends.Check if you run itEPSS 0.56%Aug 24, 2026