Multiple Grafana Vulnerabilities Allow Remote Code Execution

CERT-FR Security Advisories

Published March 26th, 2026

Detected March 26th, 2026

Summary

CERT-FR has issued an advisory regarding multiple critical vulnerabilities discovered in Grafana software. These vulnerabilities, identified as CVE-2026-27876 and CVE-2026-27880, can allow remote attackers to execute arbitrary code or cause a denial of service.

View original document View source feed page

What changed

CERT-FR, the French national cybersecurity agency, has issued an advisory (CERTFR-2026-AVI-0359) detailing multiple critical vulnerabilities in Grafana software. The vulnerabilities, including CVE-2026-27876 and CVE-2026-27880, affect various versions of Grafana, specifically versions prior to 11.6.14, and specific patch levels within the 12.1.x, 12.2.x, 12.3.x, and 12.4.x branches. Successful exploitation could lead to remote code execution and denial of service.

Organizations utilizing affected Grafana versions must immediately consult the Grafana security bulletin and apply the necessary patches to mitigate these risks. Failure to do so could result in severe security breaches, including unauthorized system access and operational disruption. The advisory directs users to the vendor's security bulletin for detailed patching information and specific CVE references for further technical analysis.

What to do next

Consult Grafana security bulletin for patch information
Apply available security patches to affected Grafana versions
Review system logs for signs of compromise

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 26 mars 2026 N° CERTFR-2026-AVI-0359 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans Grafana

Gestion du document

Risques

Déni de service à distance
Exécution de code arbitraire à distance

Systèmes affectés

Grafana versions 12.1.x antérieures à 12.1.10
Grafana versions 12.2.x antérieures à 12.2.8
Grafana versions 12.3.x antérieures à 12.3.6
Grafana versions 12.4.x antérieures à 12.4.2
Grafana versions antérieures à 11.6.14

Résumé

De multiples vulnérabilités ont été découvertes dans Grafana. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.