Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

grafana — Vulnerabilities & Security Advisories 58

All 58 CVE vulnerabilities found in grafana, with AI-generated Chinese analysis, references, and POCs.

This page details security weaknesses associated with Grafana, an open-source platform for visualization and analytics. It aggregates a comprehensive list of Common Weakness Enumerations (CWEs) that have been identified within the software ecosystem, providing a structured view of the technical flaws discovered over time. The data covers vulnerability reports from recent years, ensuring that users have access to both historical context and current security posture information regarding the product's resilience against known attack vectors. By consulting this resource, security professionals can effectively track vendor advisories and monitor how specific issues are addressed in subsequent releases. It also allows for a deeper understanding of particular weakness classes prevalent in this type of web-based analytics software, helping teams assess risk levels more accurately. Furthermore, users can look up the complete vulnerability history of the product to identify trends, such as recurring integration flaws or configuration errors, which aids in prioritizing remediation efforts. This centralized view eliminates the need to scour multiple sources for scattered data, offering a clear, chronological record of security incidents. The information presented is intended to support informed decision-making during patch management and security auditing processes. Ultimately, this page serves as a reference point for evaluating the long-term security health of the platform and understanding the evolving threat landscape specific to this technology stack.

Vendor: grafana

CVE IDTitleCVSSSeverityPublished
CVE-2026-72585 Grafana - Incomplete Fix for CVE-2026-21724 Allows Editor Role to Delete Protected Contact Points CWE-284 6.5 Medium2026-08-10
CVE-2026-27879 Query resampling can cause unbounded memory allocations 6.5 Medium2026-03-27
CVE-2026-28375 Grafana Testdata datasource can issue unbounded memory allocations 6.5 Medium2026-03-27
CVE-2026-27876 RCE on Grafana via sqlExpressions 9.1 Critical2026-03-27
CVE-2026-27880 OpenFeature evaluation API reads input data with no bounds 7.5 High2026-03-27
CVE-2026-27877 Public dashboards discloses all direct mode datasources 6.5 Medium2026-03-27
CVE-2026-21725 Authorization Bypass via TOCTOU in Grafana Datasource Deletion by Name 2.6 Low2026-02-25
CVE-2025-6197 Grafana OSS 安全漏洞 CWE-601 4.2 Medium2025-07-18
CVE-2025-6023 Grafana OSS 安全漏洞 CWE-601 7.6 High2025-07-18
CVE-2025-3415 Grafana 安全漏洞 CWE-200 4.3 Medium2025-07-17
CVE-2025-1088 Very long unicode dashboard title or panel name can hang the frontend CWE-20 2.7 Low2025-06-18
CVE-2025-3454 Grafana 安全漏洞 CWE-285 5.0 Medium2025-06-02
CVE-2025-3260 Grafana 安全漏洞 CWE-863 8.3 High2025-06-02
CVE-2025-3580 Grafana OSS 安全漏洞 CWE-284 5.5 Medium2025-05-23
CVE-2025-4123 Grafana 安全漏洞 CWE-79 7.6 High2025-05-22
CVE-2025-2703 Grafana 安全漏洞 CWE-79 6.8 Medium2025-04-23
CVE-2024-11741 Grafana 安全漏洞 CWE-200 4.3 Medium2025-01-31
CVE-2024-10452 Grafana 安全漏洞 CWE-639 2.2 Low2024-10-29
CVE-2024-9264 Grafana SQL Expressions allow for remote code execution CWE-94 9.9 Critical2024-10-18
CVE-2024-8118 Grafana alerting wrong permission on datasource rule write endpoint CWE-653 4.3AIMediumAI2024-09-26
CVE-2024-6322 Grafana 安全漏洞 CWE-266 4.4 Medium2024-08-20
CVE-2024-1313 Users outside an organization can delete a snapshot with its key CWE-639 6.5 Medium2024-03-26
CVE-2024-1442 User with permissions to create a data source can CRUD all data sources CWE-269 6.0 Medium2024-03-07
CVE-2023-6152 Grafana 安全漏洞 CWE-863 5.4 Medium2024-02-13
CVE-2023-3128 Grafana 安全漏洞 CWE-290 9.4 Critical2023-06-22
CVE-2023-2183 Grafana 安全漏洞 CWE-284 4.1 Medium2023-06-06
CVE-2023-2801 Grafana 安全漏洞 CWE-820 7.5 High2023-06-06
CVE-2023-1387 Grafana 安全漏洞 CWE-200 4.2 Medium2023-04-26
CVE-2023-1410 Stored XSS in Graphite FunctionDescription tooltip CWE-79 6.2 Medium2023-03-23
CVE-2023-22462 Stored XSS in Grafana Text plugin CWE-79 6.4 Medium2023-03-02

All 58 known CVE vulnerabilities affecting grafana with full Chinese analysis, references, and POCs where available.