[CLSA-2026:1789289678] grafana: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-22 12:36:15 UTC
Description:
- CVE-2026-21727: drop the org_id = 0 backward-compatibility condition from the correlations read and delete paths so legacy correlation records created before Grafana 10.2 can no longer be read or deleted across organizations
Updated packages:
  • grafana-10.2.6-15.el9_6.tuxcare.els17.x86_64.rpm
    sha:9ac7125e0421e6ff167254a1ba43d8448ded670e29cf3f03e6d1ee3150fba3ac
  • grafana-selinux-10.2.6-15.el9_6.tuxcare.els17.x86_64.rpm
    sha:db2151f492803bc5f3664319cb5fb12bda8747f804fc27177173b8709a4c7e59
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.