Plan
active
Grafana 13.2.4: four security CVE patches, no KEV listing
- Platform/SRE — Plan: Four CVEs patched (including IAM/SCIM and OAuth2 fixes), none KEV-listed and EPSS scores are effectively zero — no active exploitation, but Grafana is standard in the observability stack; schedule an upgrade to 13.2.4 this quarter.
- CI/CD — Skip
- Leader — Skip
- Signals: CVE-2026-15577 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-33374 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-92539 — CISA KEV: not listed, EPSS n/a
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.