Grafana security advisory (AV26-860)
Brief
Serial Number: AV26-860
Date: August 28, 2026
As of August 27, 2026, Grafana is affected by a vulnerability in the following product:
- Alloy
- Prior to or equal to 1.18.1
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- Grafana: The open and composable observability platform
- Grafana Labs
- CVE-2026-19516 CVE Record
Grafana security advisory (AV26-860) - Canadian Centre for Cyber Security