Skip to contentGrafana Oss vulnerabilities
- grafana, grafana oss +1 moreSQL Expressions Read File From DiskCVE-2026-33380Fix available6.3 Medium
- grafana, grafana oss +1 moreBAC in Snapshot API allows deletion of unauthorized dashboard snapshotsCVE-2026-28380Fix available6.5 Medium
- grafana oss, grafana +1 moreUsers can generate Service Account tokens after permissions removalCVE-2026-33381Fix available5.9 Medium
- grafana, grafana oss +1 moreDashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard AdminCVE-2026-33377Fix available7.1 High
- grafana, grafana oss +1 moreGrafana Live push endpoint allows unbounded memory allocation leading to OOMCVE-2026-28376Fix available6.5 Medium
- grafana, grafana oss +1 moreViewer-triggered race condition in Grafana Live leads to complete server crashCVE-2026-28379Fix available6.5 Medium
- grafana, grafana oss +1 moreMissing Protected-field Authorization in Provisioning Contact Points APICVE-2026-21724Fix available5.4 Medium
- grafana, grafana oss +1 moreGrafana MSSQL Data Source Plugin: Restriction Bypass Leading to OOM DoSCVE-2026-33375Fix available6.5 Medium