Grafana Cloud: Trust page changed

Trust / securityChanged (not classified) (rule)Changed 2026-10-24 08:45 UTCgrafana.com

Summary

Grafana Cloud’s trust page added a Security Notices section with a PHP2Shell update stating that Grafana Labs is not affected. This gives customers an explicit security-status notice for PHP2Shell.

Machine-written from the diff below (Sol; type: other). Check the diff before relying on it.

What changed

~~Struck in red~~ is what Grafana Cloud removed; blue is what they added. Muted text is unchanged context.

Added#1

…Harish Kolla View the full Hall of Fame nothing here Recent Security Blog Posts Stay informed with the…

…Harish Kolla View the full Hall of Fame Security Notices Updates and notices from the Grafana Labs security team. ‹date› PHP2Shell update ( ‹date› ) Grafana Labs not affected by PHP2Shell Recent Security Blog Posts Stay informed with the…

Compared with the previous archived version (#4413 to #6905). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).

Archive proof

Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves these records existed by then and have not been changed since, by anyone, Rewindex included.

How the archive is checked, and what it cannot prove.

Oct 21
Before captured 08:45 UTC
In the 2026-10-21 checkpoint, timestamped by FreeTSA and DigiCert on Oct 22, 00:41 UTC. Record hash 3de468074db33642…
Download proof
Oct 24
After captured 08:45 UTC
In the 2026-10-24 checkpoint, timestamped by FreeTSA and DigiCert on Oct 25, 00:41 UTC. Record hash d393ebba99233c3e…
Download proof

History of this page

TodayWednesday, November 4Wed, Nov 4

1 page change

Trust / security
08:44Page change
Trust pagechanged

Thursday, October 29

1 page change

Content changed
08:44Page change
Trust pagechanged
Grafana Cloud added four security advisories: three High-severity issues involving alerting contact points, Azure Monitor token disclosure and SSO settings, plus a Medium-severity server-side expression parser denial of service. Customers using these capabilities have new security notices to review; four older advisories were removed from the displayed list, which does not establish that those issues were resolved.

Saturday, October 24

1 page change

Content changed
08:45Page change
Trust pagechangedthis change
Grafana Cloud’s trust page added a Security Notices section with a PHP2Shell update stating that Grafana Labs is not affected. This gives customers an explicit security-status notice for PHP2Shell.

Wednesday, October 21

1 page change

Content changed
08:45Page change
Trust pagechanged
Grafana’s trust page added CVE-2026-92539, rated Medium (6.7), covering cross-organization user modification and deletion via the SCIM API in Grafana Enterprise. It removed the visible entry for CVE-2026-89039, rated Medium (6.5), concerning arbitrary file read in mcp-k6; removal from this page does not establish resolution.

Cite this

Trust page changed on Grafana Cloud’s Trust page, changed 2026-10-24 08:45 UTC (change 2 of 4).

Title: Trust page changed
Vendor: Grafana Cloud
Date: 2026-10-24 08:45 UTC
URL: https://rewindex.com/change/p6905

All Grafana Cloud changes Grafana Cloud profile Markdown JSON