Known vulnerabilities in Grafana Enterprise
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-27876 | RCE on Grafana via sqlExpressions | 9.1 Critical | Mar 27, 2026 |
| CVE-2025-41115 | SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage… | 10.0 Critical | Nov 21, 2025 |
| CVE-2023-3128 | Grafana is validating Azure AD accounts based on the email claim | 9.4 Critical | Jun 22, 2023 |