Количество 11
Количество 11
CVE-2026-21721
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.
CVE-2026-21721
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.
CVE-2026-21721
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.
CVE-2026-21721
The dashboard permissions API does not verify the target dashboard sco ...
GHSA-jgfq-mgxg-4qwm
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.
BDU:2026-01120
Уязвимость прикладного программного интерфейса платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю повысить свои привилегии и получить несанкционированный доступ к защищаемой информации
ROS-20260311-73-0010
Уязвимость grafana
RLSA-2026:2920
Important: grafana security update
RLSA-2026:2914
Important: grafana security update
ELSA-2026-2920
ELSA-2026-2920: grafana security update (IMPORTANT)
ELSA-2026-2914
ELSA-2026-2914: grafana security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-21721 The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation. | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-21721 The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation. | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-21721 The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation. | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-21721 The dashboard permissions API does not verify the target dashboard sco ... | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
| GHSA-jgfq-mgxg-4qwm The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation. | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
 | BDU:2026-01120 Уязвимость прикладного программного интерфейса платформы для мониторинга и наблюдения Grafana, позволяющая нарушителю повысить свои привилегии и получить несанкционированный доступ к защищаемой информации | CVSS3: 8.1 | 0% Низкий | около 2 месяцев назад |
 | ROS-20260311-73-0010 Уязвимость grafana | CVSS3: 8.1 | 0% Низкий | 16 дней назад |
 | RLSA-2026:2920 Important: grafana security update | 30 дней назад | ||
| RLSA-2026:2914 Important: grafana security update | 30 дней назад | ||
| ELSA-2026-2920 ELSA-2026-2920: grafana security update (IMPORTANT) | около 1 месяца назад | ||
| ELSA-2026-2914 ELSA-2026-2914: grafana security update (IMPORTANT) | около 1 месяца назад |
Уязвимостей на страницу