Grafana security release: critical and high severity security fixes for CVE-2026-27876 and CVE-2026-27880.

{
  "signal_id": "97ac85c9-cf3f-4bab-886d-591f0a81d63a",
  "signal_type": "news",
  "signal_subtype": "launches",
  "detected_at": "2026-03-25T00:00:00+00:00",
  "company": {
    "name": "Grafana Labs",
    "domain": "grafana.com"
  },
  "data": {
    "url": "https://grafana.com/blog/grafana-security-release-critical-and-high-severity-security-fixes-for-cve-2026-27876-and-cve-2026-27880",
    "title": "Grafana security release: critical and high severity security fixes for CVE-2026-27876 and CVE-2026-27880.",
    "excerpt": "Grafana security release: critical and high severity security fixes for CVE-2026-27876 and CVE-2026-27880.\n\n2026-03-25 - 5 min\n\nToday Grafana Labs is releasing Grafana 12.4.2 along with patches for Grafana 12.3, 12.2, 12.1, and 11.6, which include critical and high severity security fixes. Grafana Labs recommend that you install the newly released versions as soon as possible.\n\nGrafana 12.4.2 with security fixes:\n\nGrafana 12.3.6 with security fixes:\n\nGrafana 12.2.8 with security fixes:\n\nGrafana 12.1.10 with security fixes:\n\nGrafana 11.6.14 with security fixes:\n\nAs per its security policy, Grafana Labs customers have received security patched versions two weeks in advance under embargo, and Grafana Cloud has been patched.\n\nGrafana Labs has also coordinated closely with all cloud providers licensed to offer Grafana Cloud. They received early notification under embargo and confirmed that their offerings are secure at the time of this announcement. This is applicable to Amazon Managed Grafana and Azure Managed Grafana.\n\nCVE-2026-27876: SQL expressions arbitrary file write enabling remote code execution.\n\nGrafana's SQL expressions feature enables transforming query data with familiar SQL syntax. This syntax, however, also permitted writing arbitrary files to the file system in such a way that one could chain several attack vectors to achieve remote code execution.\n\nThe CVSS score...",
    "product": "Grafana 12.4.2",
    "summary": "Grafana Labs launches Grafana 12.4.2.",
    "category": "launches",
    "found_at": "2026-03-25T00:00:00Z",
    "planning": false,
    "image_url": "https://a-us.storyblok.com/f/1022730/b99d8b21fc/grafana-security-fix.png",
    "confidence": 0.4038,
    "product_data": {
      "full_text": "Grafana 12.4.2",
      "fuzzy_match": true
    },
    "published_at": "2026-03-25T00:00:00Z",
    "article_sentence": "Grafana Labs is releasing Grafana 12.4.2 along with patches for Grafana 12.3, 12.2, 12.1, and 11.6, which include critical and high severity security fixes."
  }
}

curl https://signals.autobound.ai/v1/signals/97ac85c9-cf3f-4bab-886d-591f0a81d63a \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"grafana.com","limit":20}'