Are Grafana & Kibana safe right now?
Nothing new in 90 days
No Grafana & Kibana flaws have been added to CISA's exploited list in the last 90 days (the most recent was Oct 9, 2025). Keep automatic updates on: that can change any day.
0exploited in the last 30 days
0in the last 90 days
0zero-days in 2026
3on CISA's list, all time
Earlier exploited flaws
- Grafana Path Traversal Vulnerability
- Grafana Authentication Bypass Vulnerability
- Kibana Arbitrary Code Execution
By year
| Year | Exploited flaws added | Zero-days |
|---|---|---|
| 2026 (so far) | 0 | 0 |
| 2025 | 1 | 0 |
| 2024 | 0 | 0 |
| 2023 | 0 | 0 |
| 2022 | 2 | 0 |
Questions
Are Grafana & Kibana safe right now?
No Grafana & Kibana flaws have been added to CISA's exploited list in the last 90 days (the most recent was Oct 9, 2025). Keep automatic updates on: that can change any day. Confirm with the vendor's own advisories and install updates as soon as they're available.
How many Grafana & Kibana vulnerabilities have been exploited?
3 flaws are on CISA's list of vulnerabilities known to be exploited in real attacks.
Covers products matching grafana, kibana. Sources: CISA's Known Exploited Vulnerabilities catalog and the vendors' own advisories. Updated every hour. General information only; confirm details with the vendor.