ZeusQA
Start free

Known exploited vulnerabilities

Grafana Labs vulnerabilities attackers have used

Every Grafana Labs vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Grafana Labs vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2021-43798, added Oct 9, 2025. Grafana has the most entries (2).

In KEV, all time
2
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every Grafana Labs entry in CISA KEV

  1. CVE-2021-43798

    Added · due

    Grafana Path Traversal Vulnerability

    Grafana contains a path traversal vulnerability that could allow access to local files.

  2. CVE-2021-39226

    Added · due

    Grafana Authentication Bypass Vulnerability

    Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works