grafana

Top products

The 15 most recently published vulnerabilities affecting grafana.

• CVE-2026-9765CVE-2026-9765 CVE Record7.1Jul 24, 2026
• CVE-2026-21723CVE-2026-21723 Record5.3Jul 23, 2026
• CVE-2026-21729Loki detected_fields query limits results in unbounded memory allocation7.5Jul 16, 2026
• CVE-2026-15583SSRF (confused deputy) in Grafana MCP Server via X-Grafana-URL header8.6Jul 15, 2026
• CVE-2026-8595Stored XSS in the table panel (TableNG)6.8Jul 10, 2026
• CVE-2026-8609Pre-authentication denial of service via the OAuth login route5.3Jul 10, 2026
• CVE-2026-33382Denial of service via unbounded request body size7.5Jul 10, 2026
• CVE-2026-28378Cross-Organization Public Dashboard Deletion via Missing Org Isolation3.1Jul 7, 2026
• CVE-2026-42127Pre-authentication denial of service in the public dashboard query endpoint7.5Jun 22, 2026
• CVE-2026-28381Local File Read/Write to Potential Privilege Escalation via Snowflake GET/PUT9.6Jun 22, 2026
• CVE-2026-9029Stored XSS in the Geomap panel tile-layer attribution7.3Jun 22, 2026
• CVE-2026-10601Path traversal in the Tempo and Loki data source plugins5.4Jun 22, 2026
• CVE-2026-42129Path traversal in the Loki data source plugin7.7Jun 22, 2026
• CVE-2026-27878Tempo TraceQL query with exemplar hint could result in unbounded memory usage6.5Jun 19, 2026
• CVE-2026-11769Operator - Namespaced User Path Traversal8.8Jun 13, 2026