ChangesGrafana CloudTrust page
Grafana Cloud: Trust page changed
Grafana’s trust page added CVE-2026-92539, rated Medium (6.7), covering cross-organization user modification and deletion via the SCIM API in Grafana Enterprise. It removed the visible entry for CVE-2026-89039, rated Medium (6.5), concerning arbitrary file read in mcp-k6; removal from this page does not establish resolution.
Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.
What changed
Struck in red is what Grafana Cloud removed; blue is what they added. Muted text is unchanged context.
Compared with the previous archived version (#435 to #4413). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).
Archive proof
Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
Before captured
In the 2026-10-17 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
15dd09778a1ac42a…After captured
In the 2026-10-21 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
3de468074db33642…
History of this page
TodayWednesday, November 4Wed, Nov 4
1 page change
- Trust / securityPage change
Trust pagechanged
Thursday, October 29
1 page change
- Content changedPage change
Trust pagechanged
Grafana Cloud added four security advisories: three High-severity issues involving alerting contact points, Azure Monitor token disclosure and SSO settings, plus a Medium-severity server-side expression parser denial of service. Customers using these capabilities have new security notices to review; four older advisories were removed from the displayed list, which does not establish that those issues were resolved.
Saturday, October 24
1 page change
- Content changedPage change
Trust pagechanged
Grafana Cloud’s trust page added a Security Notices section with a PHP2Shell update stating that Grafana Labs is not affected. This gives customers an explicit security-status notice for PHP2Shell.
Wednesday, October 21
1 page change
- Content changedPage change
Trust pagechangedthis change
Grafana’s trust page added CVE-2026-92539, rated Medium (6.7), covering cross-organization user modification and deletion via the SCIM API in Grafana Enterprise. It removed the visible entry for CVE-2026-89039, rated Medium (6.5), concerning arbitrary file read in mcp-k6; removal from this page does not establish resolution.
Cite this
Trust page changed on Grafana Cloud’s Trust page, changed 2026-10-21 08:45 UTC (change 1 of 4).
- Title
- Trust page changed
- Vendor
- Grafana Cloud
- Date
- URL
- https://rewindex.com/change/p4413