Known vulnerabilities in grafana (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:grafana_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 82
Public exploits: 7
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting grafana (Red Hat package) grafana (Red Hat package) is affected by 82 known vulnerabilities: 6 high, 59 medium, 17 low Critical High Medium Low

Vulnerabilities (82)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140607 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-32282
CWE-367 Low
No
No
9.0.9-12.el9_2, 9.2.10-27.el9_4, 9.2.10-30.el8_10, 10.2.6-24.el10_0, 10.2.6-25.el10_1 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 50 more
#VU140600 - Improper input validation
CVE-2026-32281
CWE-20 Medium
No
No
9.0.9-12.el9_2, 9.2.10-27.el9_4 31.07.2026 SB2026073125
SB2026073183
SB2026073184
and 35 more
#VU140599 - Resource exhaustion
CVE-2026-32280
CWE-400 Medium
No
No
9.0.9-12.el9_2, 9.2.10-27.el9_4, 9.2.10-30.el8_10, 10.2.6-24.el10_0 31.07.2026 SB2026073125
SB2026073160
SB2026073161
and 70 more
#VU137392 - Resource exhaustion
CVE-2026-8609
CWE-400 Medium
No
No
10.2.6-28.el10_2.4 13.07.2026 SB2026071338
SB2026081226
#VU137389 - Resource exhaustion
CVE-2026-42127
CWE-400 Medium
No
No
9.2.10-32.el8_10.1, 10.2.6-23.el9_8.1 13.07.2026 SB2026071338
SB2026081237
SB2026081258
#VU137388 - Resource exhaustion
CVE-2026-33382
CWE-400 Medium
No
No
10.2.6-28.el10_2.4 13.07.2026 SB2026071338
SB2026081226
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283
CWE-1395 Medium
No
No
9.0.9-12.el9_2, 9.2.10-27.el9_4, 9.2.10-30.el8_10, 10.2.6-24.el10_0, 10.2.6-25.el10_1 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 61 more
#VU131638 - Improper Access Control
CVE-2026-33377
CWE-284 Low
No
No
9.2.10-32.el8_10.1, 10.2.6-23.el9_8.2, 10.2.6-28.el10_2.4 18.05.2026 SB2026051824
SB2026081226
SB2026081241
and 3 more
#VU131637 - Improper Access Control
CVE-2026-33376
CWE-284 Medium
No
No
10.2.6-23.el9_8.2, 10.2.6-28.el10_2.4 18.05.2026 SB2026051824
SB2026081226
SB20260824264
#VU124711 - Exposure of sensitive information to an unauthorized actor
CVE-2026-27877
CWE-200 Low
No
No
10.2.6-20.el9_6, 10.2.6-23.el10_0, 10.2.6-24.el10_1 31.03.2026 SB2026033194
SB2026042431
SB2026042902
and 2 more
#VU124118 - Improper input validation
CVE-2026-25679
CWE-20 Medium
No
No
6.3.6-11.el8_2, 7.3.6-13.el8_4, 7.5.15-10.el8_8, 9.2.10-26.el9_4, 10.2.6-19.el9_6, 10.2.6-19.el9_7, 10.2.6-22.el10_0, 10.2.6-23.el10_1 19.03.2026 SB2026031903
SB2026031904
SB2026031905
and 134 more
#VU124034 - Resource exhaustion
CVE-2025-61726
CWE-400 Medium
No
No
6.3.6-10.el8_2, 7.3.6-12.el8_4, 7.5.11-9.el8_6, 7.5.11-13.el9_0, 7.5.15-9.el8_8, 9.0.9-10.el9_2, 9.2.10-25.el9_4, 9.2.10-28.el8_10, 10.2.6-18.el9_6, 10.2.6-18.el9_7, 10.2.6-21.el10_0, 10.2.6-22.el10_1 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 143 more
#VU124033 - Improper input validation
CVE-2025-61728
CWE-20 Medium
No
No
7.5.11-9.el8_6, 7.5.11-13.el9_0, 7.5.15-9.el8_8, 9.0.9-10.el9_2, 9.2.10-25.el9_4, 9.2.10-28.el8_10, 10.2.6-18.el9_6, 10.2.6-18.el9_7, 10.2.6-21.el10_0, 10.2.6-22.el10_1 16.03.2026 SB2026031636
SB2026031637
SB2026031638
and 46 more
#VU123129 - Improper Certificate Validation
CVE-2025-68121
CWE-295 High
No
No
9.0.9-12.el9_2, 9.2.10-27.el9_4, 9.2.10-28.el8_10, 10.2.6-18.el9_6, 10.2.6-18.el9_7, 10.2.6-21.el10_0, 10.2.6-22.el10_1 23.02.2026 SB2026022333
SB2026030334
SB2026030343
and 116 more
#VU122159 - Improper Privilege Management
CVE-2026-21721
CWE-269 Low
Available
No
10.2.6-17.el9_6, 10.2.6-18.el9_7, 10.2.6-20.el10_0, 10.2.6-22.el10_1 30.01.2026 SB2026013061
SB2026022335
SB2026030249
and 4 more
#VU119235 - Resource exhaustion
CVE-2025-61729
CWE-400 Medium
No
No
6.3.6-10.el8_2, 7.3.6-12.el8_4, 7.5.11-9.el8_6, 7.5.11-13.el9_0, 7.5.15-9.el8_8, 9.0.9-10.el9_2, 9.2.10-25.el9_4, 9.2.10-27.el8_10, 10.2.6-18.el9_6, 10.2.6-18.el9_7, 10.2.6-21.el10_0, 10.2.6-22.el10_1 06.12.2025 SB2025120604
SB20251210172
SB20251210173
and 146 more
#VU118190 - Resource exhaustion
CVE-2025-58183
CWE-400 Medium
No
No
6.3.6-9.el8_2, 7.3.6-11.el8_4, 7.5.11-8.el8_6, 7.5.11-12.el9_0, 7.5.15-8.el8_8, 9.0.9-9.el9_2, 9.2.10-24.el9_4, 9.2.10-26.el8_10, 10.2.6-16.el9_6, 10.2.6-17.el9_7, 10.2.6-19.el10_0, 10.2.6-21.el10_1 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 177 more
#VU109656 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-4123
CWE-79 Low
Available
No
6.3.6-7.el8_2, 7.5.11-6.el8_6, 7.5.15-7.el8_8, 9.0.9-8.el9_2, 9.2.10-23.el8_10, 9.2.10-23.el9_4, 10.2.6-13.el9_6, 10.2.6-17.el10_0 22.05.2025 SB2025052230
SB2025052236
SB2025052237
and 7 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871
CWE-444 Medium
No
No
7.3.6-10.el8_4, 7.5.15-7.el8_8, 9.0.9-8.el9_2, 9.2.10-23.el9_4, 9.2.10-25.el8_10, 10.2.6-18.el10_0 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105983 - Resource exhaustion
CVE-2025-30204
CWE-400 Medium
No
No
9.0.9-6.el9_2, 10.2.6-9.el9_5, 10.2.6-11.el9_6 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more


Showing elements 1 - 20 out of 82