CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

Grafana security advisory (AV26-796)

unknownCVE-2026-19516
Serial Number: AV26-796 Date: August 11, 2026 As of August 11, 2026, Grafana is affected by a vulnerability in the following products: Grafana MCP Server Prior to or equal to 1.0.0 mcp-grafana Prior to or equal to 1.0.0 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Grafana: The open and composable observability platform | Grafana Labs CVE-2026-19516 CVE Record

CSIRTS triage

vendor: Grafanaproduct: Grafana MCP ServerOtheraffected: prior to or equal to 1.0.0
What
A vulnerability exists in Grafana MCP Server that requires further investigation.
Who is affected
Deployments of Grafana MCP Server version 1.0.0 and earlier are affected.
Urgency
Moderate urgency; details are limited and no public exploitation has been reported.
Action
Review the Grafana Labs security advisory and apply updates as they become available.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Grafana MCP Server

Get an email when a new Grafana MCP Server advisory drops — max one per day, one-click unsubscribe.

Details

Source
Canadian Centre for Cyber Security (CA · national-cert · site)
Severity
unknown
Published
2026-08-11
Exploitation
Not in CISA KEV at last sync

Original advisory: https://cyber.gc.ca/en/alerts-advisories/grafana-security-advisory-av26-796

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-19516coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

More from Canadian Centre for Cyber Security