Vulnerabilities & PatchesEmerging1 src
Grafana security advisory (AV26-860)
Serial Number: AV26-860
Date: August 28, 2026
As of August 27, 2026, Grafana is affected by a vulnerability in the following product:
• Alloy
• Prior to or equal to 1.18.1
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
• Grafana: The open and composable observability platform
• Grafana Labs
• CVE-2026-19516 CVE Record
Grafana security advisory (AV26-860) - Canadian Centre for Cyber Security