CVE-2021-27358: Grafana

High severity, CVSS 7.5. EPSS: 83% chance of exploitation in the next 30 days.

The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.

Affected products

• Grafana Grafana: from 6.7.3, up to and including 7.4.1
• Netapp E-Series Performance Analyzer: affected versions not specified

Published 2021-03-18. Last modified 2026-06-17.