Known vulnerabilities in Grafana 12.2.8+security-04

Software: Grafana
Version: 12.2.8+security-04
Software CPE: cpe:2.3:a:grafana_labs:grafana:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Grafana version 12.2.8+security-04 Grafana 12.2.8+security-04 is affected by 6 vulnerabilities: 5 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153113 - Missing Authorization
CVE-2026-13720
CWE-862 Low
No
No
12.4.12, 13.0.10, 13.1.7, 13.2.3 01.10.2026 SB2026100190
#VU137392 - Resource exhaustion
CVE-2026-8609
CWE-400 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338
SB2026081226
#VU137390 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-42129
CWE-22 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338
#VU137389 - Resource exhaustion
CVE-2026-42127
CWE-400 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338
SB2026081237
SB2026081258
and 1 more
#VU137388 - Resource exhaustion
CVE-2026-33382
CWE-400 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338
SB2026081226
#VU137387 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-10601
CWE-22 Medium
No
No
11.6.15, 12.2.9, 12.3.7, 12.4.4, 13.0.2 13.07.2026 SB2026071338