Vulnerability Bulletins |
CVE-2026-15577 |
|
| Affected software | GRAFANA |
| A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorization). On Grafana 12.4 the affected API is only available when the experimental provisioning feature toggle is enabled. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-15577 | |