Known vulnerabilities in Grafana 12.1.10+security-01

Software: Grafana
Version: 12.1.10+security-01
Software CPE: cpe:2.3:a:grafana_labs:grafana:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Grafana version 12.1.10+security-01 Grafana 12.1.10+security-01 is affected by 12 vulnerabilities: 1 medium, 11 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153113 - Missing Authorization
CVE-2026-13720
CWE-862 Low
No
No
12.4.12, 13.0.10, 13.1.7, 13.2.3 01.10.2026 SB2026100190
#VU131641 - Improper Access Control
CVE-2026-33381
CWE-284 Low
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
#VU131640 - Improper Access Control
CVE-2026-33380
CWE-284 Low
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
#VU131639 - Improper input validation
CVE-2026-33378
CWE-20 Low
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
#VU131638 - Improper Access Control
CVE-2026-33377
CWE-284 Low
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
SB2026081226
SB2026081241
and 4 more
#VU131637 - Improper Access Control
CVE-2026-33376
CWE-284 Medium
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
SB2026081226
SB20260824264
and 1 more
#VU131636 - Allocation of Resources Without Limits or Throttling
CVE-2026-28383
CWE-770 Low
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
#VU131635 - Improper Access Control
CVE-2026-28380
CWE-284 Low
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
#VU131634 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-28379
CWE-362 Low
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
#VU131633 - Allocation of Resources Without Limits or Throttling
CVE-2026-28376
CWE-770 Low
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
#VU131632 - Authorization Bypass Through User-Controlled Key
CVE-2026-28374
CWE-639 Low
No
No
11.6.14+security-04, 12.2.8+security-04, 12.3.6+security-04, 12.4.3+security-02, 13.0.1+security-01 18.05.2026 SB2026051824
#VU126254 - Improper Access Control
CVE-2025-12141
CWE-284 Low
No
No
12.3.1 15.04.2026 SB20260415176