← All advisories

Medium severity4.3NVD Advisory· Published May 13, 2026· Updated Jun 2, 2026

CVE-2026-28374

CVE-2026-28374

Description

Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.

Affected products

6

Grafana/Grafanallm-fuzzy
osv-coords5 versions
pkg:apk/chainguard/grafana-12.4 pkg:apk/wolfi/grafana-12.4 pkg:bitnami/grafana pkg:rpm/opensuse/grafana&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/grafana&distro=openSUSE%20Tumbleweed
< 12.4.3.02-r0+ 4 more
- (no CPE)range: < 12.4.3.02-r0
- (no CPE)range: < 12.4.3.02-r0
- (no CPE)range: >= 8.5.0, < 11.6.14
- (no CPE)range: < 11.6.14+security04-bp160.1.1
- (no CPE)range: < 11.6.14+security04-1.1

Patches

Vulnerability mechanics

References

1

grafana.com/security/security-advisories/cve-2026-28374nvdVendor Advisory

News mentions

0

No linked articles in our index yet.