Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2021-39226

Grafana Authentication Bypass Vulnerability

Description

Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 15 Sep 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.