When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.
No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafanaUpgrade grafana-selinux | May 3, 2026 | Apr 23, 2026 |
| Alpine Linux | — | Upgrade grafana | May 20, 2026 | Mar 27, 2026 |
| Freebsd | — | Upgrade grafana | Jun 15, 2026 | May 26, 2026 |
| Oracle_linux | — | Upgrade grafanaUpgrade grafana-selinux | Apr 27, 2026 | Mar 27, 2026 |
| Redhat_linux | — | Upgrade grafanaUpgrade grafana-selinuxUpgrade grafana-debugsourceUpgrade grafana-debuginfo | Apr 28, 2026 | Mar 27, 2026 |
| Rocky_linux | — | Upgrade grafanaUpgrade grafana-selinuxUpgrade grafana-debugsourceUpgrade grafana-debuginfo | Apr 29, 2026 | Apr 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub