Login Request a demo
GR
Monitoring
Grafana
by Grafana · last CVE Oct 27, 2026
On CISA KEVExploited in the wild
139
CVEs
2
On KEV
9.8
Max CVSS
12
New 30D
Vulnerabilities139In the news1Timeline
Severity mix
Critical 9High 50Medium 74Low 6
Severity
All severities139Critical9High50Medium74Low6
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Grafana to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-36062
3.8
1%
Sep 22
Grafana is an open-source platform for monitoring and observability
Affected: before 8.5.13; 9.0.0 before 9.0.9; 9.1.0 before 9.1.6
CVE-2022-39324
3.5
1%
Jan 27
Grafana is an open-source platform for monitoring and observability
Affected: before 8.5.16; 9.0.0 before 9.2.8
CVE-2026-21727
3.3
0%
Apr 15
Grafana Correlations: Cross-Tenant Data Disclosure and Permanent Deletion via Legacy org_id=0 Record
Affected: 10.2.0 before 12.4.0
CVE-2026-28378
2.7
0%
Jul 7
Cross-Organization Public Dashboard Deletion via Missing Org Isolation
Affected: 11.6.0 through 11.6.13; 12.1.0 through 12.1.9; 12.2.0 through 12.2.7; 12.3.0 through 12.3.5; 12.4.0 through 12.4.1
CVE-2024-10452
2.7
0%
Oct 29
Organization admins can delete pending invites created in an organization they are not part of
Affected: 10.4.0
CVE-2026-21725
2.0
0%
Feb 25
Authorization Bypass via TOCTOU in Grafana Datasource Deletion by Name
Affected: v11.0.0 before v12.4.1
Showing 6