#grafana

2 articles

Security Alerts Apr 15, 2026

CVE-2025-41118: Data handling vulnerability in Grafana Pyroscope

Pyroscope is an open-source continuous profiling database. The database supports various storage backends, including Tencent Cloud Object Storage (COS). If the database is configured to use Tencent C...

Security Alerts Mar 5, 2026

CVE-2026-27876: Remote code execution in Grafana

A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so all users are always ...