Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-19197

Опубликовано: 26 авг. 2026
Источник: nvd
CVSS3: 6.3
EPSS Низкий

Описание

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key (broken access control).

EPSS

Процентиль: 10%
0.00202
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.3
ubuntu
26 дней назад

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key (broken access control).

CVSS3: 6.3
github
20 дней назад

A user with organization administrator permissions can delete dashboard snapshots belonging to other organizations on the same Grafana instance, and can recover a snapshot's secret delete key using only its public share key (broken access control).

EPSS

Процентиль: 10%
0.00202
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-862