CVE-2021-43798Vulnerability
Grafana Path Traversal Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 2 independent sources · first reported by GreyNoise · last reported
Last reported 12 days ago
CISA KEVAdded 9 Oct 2025
Fix due 30 Oct 2025
Used by ransomware: not knownCISA KEV catalogue
Fix due 30 Oct 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS88.5%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
September 2026 CVE Landscape“CVE-2021-43798”
-
Coordinated Grafana Exploitation Attempts on 28 September“On 28 September 2025, GreyNoise observed a sharp one-day surge of exploitation attempts targeting CVE-2021-43798 — a Grafana path traversal vulnerability that enables arbitrary file reads.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-85046, CVE-2026-85880, CVE-2026-87491, CVE-2026-48710, CVE-2025-39964, CVE-2026-20316, CVE-2026-39987, CVE-2026-60137, CVE-2026-63030, CVE-2021-29441, CVE-2026-81963, CVE-2026-81578, CVE-2026-82078, CVE-2026-53266, CVE-2026-76460, CVE-2026-76461, CVE-2026-58704
Thanks — we review every report.