CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–2 of 2 records

CVE Vendor Product Added Due Status
CVE-2021-43798 — Grafana Path Traversal Vulnerability
Grafana contains a path traversal vulnerability that could allow access to local files.
 Grafana Labs Grafana Oct 9, 2025 Oct 30, 2025
CVE-2021-39226 — Grafana Authentication Bypass Vulnerability
Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.
 Grafana Labs Grafana Aug 25, 2022 Sep 15, 2022