Grafana Grafana vulnerabilities
104 published vulnerabilities in Grafana Grafana, 2 of them exploited in the wild. The most were published in 2026 (30), and 30 so far in 2026.
Grafana Grafana vulnerabilities by year
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Grafana Grafana vulnerabilities
- CVE-2021-39226 Grafana Authentication Bypass
- CVE-2021-43798 Grafana Path Traversal
- CVE-2025-41115 Incorrect privilege assignment
- CVE-2022-39328 Grafana vulnerable to race condition allowing privilege escalation
- CVE-2022-28660 Auth bypass in n/a
- CVE-2022-26148 Information disclosure in n/a
- CVE-2020-27846 XML Processing error in github.com/crewjam/saml
- CVE-2018-15727 Grafana Authentication Bypass
- CVE-2024-9264 Grafana SQL Expressions allow for remote code execution
- CVE-2023-3128 Grafana vulnerable to Authentication Bypass by Spoofing
- CVE-2026-27876 RCE on Grafana via sqlExpressions
- CVE-2021-41244 Cross organization admin control in Grafana
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.