Grafana Labs Grafana Alloy

Name: Grafana Labs Grafana Alloy
Brand: Grafana Labs

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical1high0medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33186US	—	1.58% (75th)	Exploit	no fix	2026-03-20	≤ 1.14.1
CVE-2026-32285US	—	0.78% (56th)	—	no fix	2026-03-26	≤ 1.14.1
CVE-2026-25679US	—	0.77% (56th)	—	no fix	2026-03-06	≤ 1.14.1
CVE-2026-27141US	—	0.57% (47th)	—	no fix	2026-02-26	≤ 1.14.1
CVE-2026-27142US	—	0.34% (27th)	—	no fix	2026-03-06	≤ 1.14.1
CVE-2024-8975US	high7.8	0.30% (23rd)	—	no fix	2024-09-25	3 versions
CVE-2026-27139US	—	0.21% (11th)	—	no fix	2026-03-06	≤ 1.14.1

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read1 CVEs
CWE-1285Improper Validation of Specified Index, Position, or Offset in Input1 CVEs
CWE-1286Improper Validation of Syntactic Correctness of Input1 CVEs
CWE-129Improper Validation of Array Index1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-425Direct Request ('Forced Browsing')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.