Get real-time updates on Telegram

Grafana legacy correlations allow cross-tenant disclosure and deletion

CVE-2026-21727 affects github.com/grafana/grafana. CVSS base score 3.3 (GitHub Advisory Database). EPSS 0.00204 (percentile 0.0939), scored 2026-10-04. Affected range: < 1.9.2-0.20260127141016-e702db6096e0. Fixed version: 1.9.2-0.20260127141016-e702db6096e0.

Published 2026-10-05 23:14:26.733142+00:00

CVE

CVE-2026-21727

Product

github.com/grafana/grafana

CCR priority

13.3 /100 (P5)

CVSS

3.3 /10 · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N · GitHub Advisory Database

EPSS

0.00204 · percentile 0.0939 · 2026-10-04

KEV

no

Affected products

• github.com/grafana/grafana · < 1.9.2-0.20260127141016-e702db6096e0 · Fixed version: 1.9.2-0.20260127141016-e702db6096e0

Provenance

• GitHub Advisory Database · Source record · observed 2026-10-05 23:10:51.172112+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-21727.html