Grafana grafana/grafana-enterprise

Name: Grafana grafana/grafana-enterprise
Brand: Grafana

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical0high1medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-21721US	—OT elevated	0.72% (54th)	Exploit	12.1.5	2026-01-27	5 versions
CVE-2026-21720US	—	0.69% (53rd)	—	11.6.9	2026-01-27	5 versions
CVE-2026-21722US	—OT elevated	0.36% (30th)	—	12.1.6+security-01	2026-02-12	4 versions
CVE-2025-41117US	medium6.1	0.27% (20th)	—	12.3.2+security-01	2026-02-12	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs
CWE-703Improper Check or Handling of Exceptional Conditions1 CVEs
CWE-772Missing Release of Resource after Effective Lifetime1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.