G
Grafana Labs
Security Risk Profile
40
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 86 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 25, 2019 to present
86
Total CVEs
12
Critical+High
4
Exploited
8
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
8
Critical/High
Risk Level
40/100
medium
⚠️ 4 Active Exploits📈 2 in Last 30 Days
Severity Distribution
Critical
3High
9Medium
21Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
6
2
XSS
4
3
SSRF
3
4
Infoleak
2
5
Race Condition
1
Most Affected Products
1. Grafana Grafana126
2. Grafana Labs Grafana72
3. go/github.com/grafana/grafana10
4. redhat/grafana5
5. fedoraproject fedora2
Recent Vulnerabilities
See more →CVE-2026-81842
CVSS 4.3medium
Library panel can be moved into a folder without library panel create permission
Sep 29, 2026🔧 No Patch
CVE-2026-81841
CVSS 5.3medium
Paused shared dashboard access tokens still expose data source configuration
Sep 29, 2026🔧 No Patch
CVE-2026-12704
CVSS 6.8medium
SAML assertion replay via skipped InResponseTo validation
Sep 2, 2026🔧 No Patch
CVE-2026-17033
CVSS 6.8medium
CVE Record
Aug 24, 2026🔧 No Patch
CVE-2026-17183
CVSS 7.1high
CVE Record
Aug 19, 2026🔧 No Patch
EOL-grafana-13.2
unknown
Aug 18, 2026
REDHAT-BUG-2499061
CVSS 4.0medium
Jul 10, 2026🔧 No Patch
CVE-2026-33382
CVSS 7.5high
Denial of service via unbounded request body size
Jul 10, 2026🔧 No Patch
EOL-grafana-13.1
unknown
Jun 23, 2026
CVE-2026-42127
CVSS 7.5high
Pre-authentication denial of service in the public dashboard query endpoint
Jun 22, 2026🔧 No Patch
Monitor Grafana Labs in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.