13.2.4
2026-10-14T08:51:33Z•11fd9fba1b97514d7e9ad342f4bff859c2db8b8389dda6ae05351107d116b936
CVE-2026-13719CVE-2026-13720CVE-2026-15577CVE-2026-15815CVE-2026-33374CVE-2026-76154CVE-2026-79656CVE-2026-81841CVE-2026-81842CVE-2026-92539CVE-2026-93294CVE-2026-95502CVE remediationEnterpriseGrafanaIAMOAuth2SCIMauthenticationauthorizationdashboardmonitoringrelease notessecurity update
What happened
Grafana release notes for versions 13.2.4, 13.1.8, 13.0.11, and 12.4.13 document security fixes for CVE-2026-15577, CVE-2026-33374, CVE-2026-93294, CVE-2026-95502, and CVE-2026-92539 affecting Enterprise SCIM/IAM endpoints. Earlier listed releases also address additional 2026 CVEs, including CVE-2026-13719, CVE-2026-13720, CVE-2026-81841, CVE-2026-81842, CVE-2026-15815, CVE-2026-76154, and CVE-2026-79656. The releases include security hardening for OAuth2 cross-host redirects and related bug fixes. Organizations should upgrade to the applicable patched maintenance release.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- grafana_grafana_releases
- Record identifier
- 11fd9fba1b97514d7e9ad342f4bff859c2db8b8389dda6ae05351107d116b936
- Enrichment time
- 2026-10-14T08:51:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.