medium6.5
CVE-2026-28380
Any Editor could delete any snapshot, even if they have no access to read or write them.
Impact
Any Editor could delete any snapshot, even if they have no access to read or write them.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grafana | Grafana | from 8.5.0 before 11.6.14 from 12.2.0 before 12.2.8 from 12.3.0 before 12.3.6 from 12.4.0 before 12.4.3 Versions 11.6.14, 12.2.8 |