Skip to main content

Grafana CVE-2026-42127

MEDIUM
N/A vendor:alpine
Grafana Information Disclosure
Share

Lifecycle Timeline

1
Analysis Generated
Jun 13, 2026 - 12:01 vuln.today

DescriptionCVE.org

Alpine Linux: grafana fixed in 12.4.4-r0

AnalysisAI

Grafana on Alpine Linux was patched at package version 12.4.4-r0, addressing CVE-2026-42127. The underlying vulnerability type, attack vector, and impact have not been disclosed in the available intelligence - only the Alpine Linux vendor advisory confirming a fix is present. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Access Grafana instance
Exploit
Trigger undisclosed vulnerability
Impact
Achieve undisclosed impact
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation conditions are unknown. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Risk cannot be meaningfully assessed from the available data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An exploit scenario cannot be constructed from the available data. The vulnerability type, affected component within Grafana, required access level, and impact are all undisclosed. …
Remediation Upgrade the Grafana Alpine Linux package to version 12.4.4-r0 or later using the Alpine package manager: 'apk upgrade grafana'. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More from same product – last 7 days

CVE-2026-11769 MEDIUM
6.4 Jun 13

Privilege escalation in Grafana Operator (all versions ≤ 5.23) allows any user with Kubernetes RBAC permissions to creat

Share

CVE-2026-42127 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy