Boletines de Vulnerabilidades |
CVE-2026-33379 |
|
| Software afectado | GRAFANA |
| A user with any role, including Viewer or a service account with no permissions, can create, externally publish, and delete dashboard snapshots (missing authorization). Only Grafana OSS and Grafana Enterprise 12.4 are affected; earlier versions and Grafana 13 are not. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-33379 | |














