Security fixes in grafana 12.4.9-r1 (CVE-2026-73502)
Description
Grafana version 12.4.9-r1 addresses multiple security vulnerabilities including CVE-2026-73502. The update fixes nine vulnerabilities in total. No CVSS score is provided for CVE-2026-73502. There are no known exploits in the wild for this vulnerability. The affected versions include all versions prior to 12.4.9-r1 and the version 12.4.9-r1 itself is the fixed release.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-73502 is one of nine security vulnerabilities fixed in Grafana version 12.4.9-r1. The package update resolves these vulnerabilities, improving the security posture of the software. No detailed technical information or CVSS score is provided for this specific CVE. The vulnerability affects Alpine ecosystem versions prior to 12.4.9-r1, with the fixed version being 12.4.9-r1.
Potential Impact
The vulnerabilities fixed in Grafana 12.4.9-r1, including CVE-2026-73502, represent security issues that could potentially affect the confidentiality, integrity, or availability of the affected software. However, no known exploits are reported in the wild, and the severity is not explicitly scored. The impact is mitigated by applying the fixed version.
Mitigation Recommendations
Users should upgrade to Grafana version 12.4.9-r1 to remediate CVE-2026-73502 and the other associated vulnerabilities. Since a patch is available and the fixed version is 12.4.9-r1, applying this update is the recommended action.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- CLEANSTART-2026-RH24736
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Alpine"]
- State
- PUBLISHED
Threat ID: 6a984547acd9273b496ab01b
Added to database: 09/02/2026, 15:48:23 UTC
Last enriched: 09/08/2026, 00:24:02 UTC
Last updated: 10/16/2026, 06:48:18 UTC
Views: 44
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.