Grafana Labs
- Aliases / services
- Grafana Labs / Grafana Cloud / Grafana Enterprise / grafana.com
- Official website
- https://grafana.com/
Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.
Response status by service
Grafana Cloud
- Response status
- Does not include PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
Observability and monitoring platform.
The October 23 security notice states that Grafana Cloud does not include PHP and is unaffected by PHP2Shell.
Scope: Covers Grafana Cloud; independently check PHP applications that you monitor.
What users should do
No Grafana Cloud PHP update is required for this issue.
Official service URL
Source URLs
- PHP2Shell response and scopehttps://grafana.com/security/notices/php2shell-10-22-2026/Response evidence
- https://grafana.com/security/https://grafana.com/security/Service and operation documentation
Grafana Enterprise
- Response status
- Does not include PHP; unaffected
- Response information checked
- 2026-10-28
Current re-audit: Official response verified · Research date: 2026-10-28
The October 23 official notice says Grafana Enterprise contains no PHP and is unaffected by PHP2Shell.
Scope: Covers the Enterprise product, not separate customer PHP systems.
What users should do
No Grafana Enterprise PHP update is required for this issue.
Source URLs
- PHP2Shell response and scopehttps://grafana.com/security/notices/php2shell-10-22-2026/Response evidence
- https://grafana.com/security/https://grafana.com/security/Service and operation documentation
Related official sources
- PHP2Shell response and scopeOfficial notice
Comments