tag
Grafana
Critical
Grafana Enterprise SCIM User ID Collision / Impersonation (CVE-2025-41115)
CVE-2025-41115·
Grafana Enterprise / Grafana Cloud, SCIM provisioning component (/api/scim/v2/Users)
unpatched
Critical
Percona PMM Authenticated RCE via PostgreSQL COPY TO PROGRAM (CVE-2026-25212)
CVE-2026-25212·
Percona Monitoring and Management (PMM)
patched
High
Grafana Dashboard Permissions Broken Access Control — Editor-to-Admin Privilege Escalation (CVE-2026-21721)
CVE-2026-21721·
Grafana (self-hosted, dashboard permissions API)
unpatched