# Grafana Cloud: Trust page changed

> Grafana’s trust page added CVE-2026-92539, rated Medium (6.7), covering cross-organization user modification and deletion via the SCIM API in Grafana Enterprise. It removed the visible entry for CVE-2026-89039, rated Medium (6.5), concerning arbitrary file read in mcp-k6; removal from this page does

Canonical: https://rewindex.com/change/p4413
Last updated: 2026-10-21T08:45:15Z

**Summary:** Grafana’s trust page added CVE-2026-92539, rated Medium (6.7), covering cross-organization user modification and deletion via the SCIM API in Grafana Enterprise. It removed the visible entry for CVE-2026-89039, rated Medium (6.5), concerning arbitrary file read in mcp-k6; removal from this page does not establish resolution. _(machine-written, sol)_
- Kind: Trust / security · Label: Changed (not classified) (rule)
- Changed: 2026-10-21 08:45 UTC · Detected: 2026-10-21 08:45 UTC
- [Source: https://grafana.com/security](https://grafana.com/security)
- [Company: Grafana Cloud](https://rewindex.com/company/grafana-cloud.md)
- Versions: before page\_version:435 → after page\_version:4413
- Change 1 of 4 for this page

## What changed

**1. Changed**

```diff
- Security | Grafana Labs Grafana Labs is a Leader in the 2026 Gartner® Magic Quadrant™ for Observability Platforms.
+ Security | Grafana Labs See everything announced at ObservabilityCON 2026: AI that monitors your AI, faster log search, lower telemetry costs, and more.
  Learn more Downloads Contact Us Grafana Cloud Solutions…
```

**2. Added**

```diff
  …calls to arbitrary Azure Resource Manager APIs ‹date›
+ CVE-2026-92539 Medium (6.7) Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise
  ‹date› CVE-2026-15577 Medium (6.5) Git Sync connection configuration…
```

**3. Removed**

```diff
  …memory allocation in the Prometheus rule conversion API
- ‹date› CVE-2026-89039 Medium (6.5) Arbitrary file read via the convert_playwright_script prompt in mcp-k6
  View all security advisories Security Hall of Fame…
```

## History of this page

| When (UTC) | Change | Label |
| --- | --- | --- |
| 2026-10-21 08:45 UTC | Trust page changed (this change) | Changed (not classified) |
| 2026-10-24 08:45 UTC | [Trust page changed](https://rewindex.com/change/p6905.md) | Changed (not classified) |
| 2026-10-29 08:44 UTC | [Trust page changed](https://rewindex.com/change/p10357.md) | Changed (not classified) |
| 2026-11-04 08:44 UTC | [Trust page changed](https://rewindex.com/change/p14516.md) | Changed (not classified) |

Next: [change](https://rewindex.com/change/p6905.md) · All Grafana Cloud changes: [timeline](https://rewindex.com/company/grafana-cloud/changes.md)
_Diff excerpts are shown on normalized text: dates, counters and tokens appear as ‹date›, ‹count›, ‹tok›; noise-only edits are hidden. Rewindex shows the changed passages, not a copy of the page._

## Cite this

Trust page changed on Grafana Cloud’s Trust page, changed 2026-10-21 08:45 UTC (change 1 of 4).

- Canonical URL: https://rewindex.com/change/p4413
- Citation: Grafana Cloud, “Trust page changed” (2026-10-21 08:45 UTC). Archived by Rewindex: https://rewindex.com/change/p4413 (CC BY 4.0).
- Markdown link: `[Grafana Cloud: Trust page changed (2026-10-21)](https://rewindex.com/change/p4413)`


---
Canonical: https://rewindex.com/change/p4413 · Markdown: https://rewindex.com/change/p4413.md · JSON: https://rewindex.com/api/v1/changes/p4413 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:28:09.120Z