Back Linuxsecurity

Oracle Grafana 9.2.10 Update Adds Email Verification for Improved Security

Linuxsecurity •LinuxSecurity Advisories • October 23, 2026

Two serious PHP flaws could let an attacker run code without logging in. See which setups and PHP versions are affected ×

[9.2.10-36.0.1] - Fixes CVE-2024-1442 Add email verification when updating user email [Orabug: 38550520] [9.2.10-36] - Rebuild against updated golang - Resolves RHEL-287629 - Resolves RHEL-279255 - Resolves RHEL-278945 - Resolves RHEL-278602

grafana-9.2.10-36.0.1.el8_10.x86_64.rpm grafana-selinux-9.2.10-36.0.1.el8_10.x86_64.rpm

grafana-9.2.10-36.0.1.el8_10.aarch64.rpm grafana-selinux-9.2.10-36.0.1.el8_10.aarch64.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Oracle Grafana and PHP Flaws Prompt Urgent Security Updates Oracle has released updates for Grafana versions 9.2.10 and 5.1.1 due to serious PHP vulnerabilities allowing attackers to execute code without authentication. The updates address CVE-2024-1442, CVE-2026-78667, CVE-2026-78669, and CVE-2026-97031, which were published on 2024-03-07 and 2026-10-08 respectively. Affected systems include various setups running specific PHP versions. Administrators are advised to apply the patches immediately to mitigate potential exploitation. The vulnerabilities are rated high with CVSS scores of 7.5. The updates include email verification enhancements and rebuilding against updated Golang versions. The vulnerabilities could impact a wide range of users if not addressed promptly. 4 sources 66

Extracted Entities

Oracle Grafana 9.2.10 Update Adds Email Verification for Improved Security

The full story

Extracted Entities

CVEs (5)

CWE Weaknesses (1)

Platforms (1)