RHSA-2026:2914
Advisory lineage Upstream: 5 Downstream: 0
Published: 19 Feb 2026, 10:26
Last modified:05 Jun 2026, 10:06
Vulnerability Summary
Overall Risk (default)
medium
32/100 CVSS Score
8.1 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
19 Feb 2026, 10:26
Published
Vulnerability first disclosed
05 Jun 2026, 10:06
Last Modified
Vulnerability information updated
Description
Red Hat Security Advisory: grafana security update
CVSS Metrics
- v3.1•HIGH•Score: 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Affected Systems
- redhat•grafana
< 0:10.2.6-22.el10_1
- redhat•grafana-debuginfo
< 0:10.2.6-22.el10_1
- redhat•grafana-debugsource
< 0:10.2.6-22.el10_1
- redhat•grafana-selinux
< 0:10.2.6-22.el10_1
References (39)
- https://access.redhat.com/errata/RHSA-2026:2914
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2418462
- https://bugzilla.redhat.com/show_bug.cgi?id=2433242
- https://bugzilla.redhat.com/show_bug.cgi?id=2434431
- https://bugzilla.redhat.com/show_bug.cgi?id=2434432
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2914.json
- https://access.redhat.com/security/cve/CVE-2025-61726
- https://www.cve.org/CVERecord?id=CVE-2025-61726
- https://nvd.nist.gov/vuln/detail/CVE-2025-61726
- https://go.dev/cl/736712
- https://go.dev/issue/77101
- https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc
- https://pkg.go.dev/vuln/GO-2026-4341
- https://access.redhat.com/security/cve/CVE-2025-61728
- https://www.cve.org/CVERecord?id=CVE-2025-61728
- https://nvd.nist.gov/vuln/detail/CVE-2025-61728
- https://go.dev/cl/736713
- https://go.dev/issue/77102
- https://pkg.go.dev/vuln/GO-2026-4342
- https://access.redhat.com/security/cve/CVE-2025-61729
- https://www.cve.org/CVERecord?id=CVE-2025-61729
- https://nvd.nist.gov/vuln/detail/CVE-2025-61729
- https://go.dev/cl/725920
- https://go.dev/issue/76445
- https://groups.google.com/g/golang-announce/c/8FJoBkPddm4
- https://pkg.go.dev/vuln/GO-2025-4155
- https://access.redhat.com/security/cve/CVE-2025-68121
- https://www.cve.org/CVERecord?id=CVE-2025-68121
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121
- https://go.dev/cl/737700
- https://go.dev/issue/77217
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk
- https://pkg.go.dev/vuln/GO-2026-4337
- https://access.redhat.com/security/cve/CVE-2026-21721
- https://www.cve.org/CVERecord?id=CVE-2026-21721
- https://nvd.nist.gov/vuln/detail/CVE-2026-21721
- https://grafana.com/security/security-advisories/CVE-2026-21721