Grafana: 10.4.19+security-01 → 12.4.4
Grafana Labs · upgrade impact · Official site ↗
Upgrade impact: Major upgrade (2 major versions). Crossing a major version usually means breaking changes. Review the vendor’s upgrade / migration guide and test before you roll it out.
Fixed by upgrading to 12.4.4 iVulnerabilities that affect 10.4.19+security-01 but no longer affect 12.4.4 — the security gain from this upgrade, by exploited status then exploitation probability.
Exploited first, then by exploitation probability (EPSS).
CVE-2026-27876 CRITICAL EPSS 2% ✓ cleared in 12.4.4 CVE-2026-27880 HIGH EPSS 1% ✓ cleared in 12.4.4 CVE-2026-21721 HIGH EPSS 1% ✓ cleared in 12.4.4 CVE-2026-21720 HIGH EPSS 1% ✓ cleared in 12.4.4 CVE-2026-42127 HIGH EPSS 0% ✓ cleared in 12.4.4 CVE-2026-14199 HIGH EPSS 0% ✓ cleared in 12.4.4 CVE-2026-28376 MEDIUM EPSS 0% ✓ cleared in 12.4.4 CVE-2026-28383 MEDIUM EPSS 0% ✓ cleared in 12.4.4 CVE-2026-33378 MEDIUM EPSS 0% ✓ cleared in 12.4.4 CVE-2026-33376 HIGH EPSS 0% ✓ cleared in 12.4.4 CVE-2026-28379 MEDIUM EPSS 0% ✓ cleared in 12.4.4 CVE-2025-12141 MEDIUM EPSS 0% ✓ cleared in 12.4.4 CVE-2026-28380 MEDIUM EPSS 0% ✓ cleared in 12.4.4 CVE-2026-33377 HIGH EPSS 0% ✓ cleared in 12.4.4 CVE-2026-21727 LOW EPSS 0% ✓ cleared in 12.4.4 CVE-2026-28374 MEDIUM EPSS 0% ✓ cleared in 12.4.4