G
Grafana Labs
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 84 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 25, 2019 to present
84
Total CVEs
12
Critical+High
4
Exploited
8
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
8
Critical/High
Risk Level
43/100
medium
⚠️ 4 Active Exploits📈 4 in Last 30 Days
Severity Distribution
Critical
3High
9Medium
19Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
6
2
XSS
4
3
SSRF
3
4
Infoleak
2
5
Race Condition
1
Most Affected Products
1. Grafana Grafana126
2. Grafana Labs Grafana70
3. go/github.com/grafana/grafana10
4. redhat/grafana5
5. fedoraproject fedora2
Recent Vulnerabilities
See more →CVE-2026-12704
CVSS 6.8medium
SAML assertion replay via skipped InResponseTo validation
Sep 2, 2026🔧 No Patch
CVE-2026-17033
CVSS 6.8medium
CVE Record
Aug 24, 2026🔧 No Patch
CVE-2026-17183
CVSS 7.1high
CVE Record
Aug 19, 2026🔧 No Patch
EOL-grafana-13.2
unknown
Aug 18, 2026
REDHAT-BUG-2499061
CVSS 4.0medium
Jul 10, 2026🔧 No Patch
CVE-2026-33382
CVSS 7.5high
Denial of service via unbounded request body size
Jul 10, 2026🔧 No Patch
EOL-grafana-13.1
unknown
Jun 23, 2026
CVE-2026-42127
CVSS 7.5high
Pre-authentication denial of service in the public dashboard query endpoint
Jun 22, 2026🔧 No Patch
CVE-2026-9029
CVSS 7.3EPSS 0%high
Stored XSS in the Geomap panel tile-layer attribution
Jun 22, 2026🔧 No Patch
CVE-2026-11769
CVSS 6.4medium
Operator - Namespaced User Path Traversal
Jun 13, 2026
Monitor Grafana Labs in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.