Grafana security advisory (AV26-936)

Serial number: AV26-936
Date: September 18, 2026

As of September 17, 2026, Grafana is affected by vulnerabilities in the following product:

  • Grafana OSS
    • Version 12.3.0 to 12.4.10
    • Version 13.0.0 to 13.08
    • Version 13.1.0 to 13.1.5
    • Version 13.2.0 to 13.2.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

Date modified: