← All advisories

Medium severity6.5NVD Advisory· Published May 13, 2026· Updated Jun 17, 2026

CVE-2026-28380

CVE-2026-28380

Description

Any Editor could delete any snapshot, even if they have no access to read or write them.

Affected products

16

osv-coords5 versions
pkg:bitnami/grafana pkg:apk/wolfi/grafana-12.4 pkg:apk/chainguard/grafana-12.4 pkg:rpm/opensuse/grafana&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/grafana&distro=openSUSE%20Leap%2016.0
>= 9.4.0, < 11.6.14+ 4 more
- (no CPE)range: >= 9.4.0, < 11.6.14
- (no CPE)range: < 12.4.3.02-r0
- (no CPE)range: < 12.4.3.02-r0
- (no CPE)range: < 11.6.14+security04-1.1
- (no CPE)range: < 11.6.14+security04-bp160.1.1
Grafana/Grafanallm-fuzzy11 versions
(expand)+ 10 more
- (no CPE)
- cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*range: >=8.5.0,<11.6.14
- cpe:2.3:a:grafana:grafana:11.6.14:-:*:*:*:*:*:*
- cpe:2.3:a:grafana:grafana:11.6.14:security01:*:*:*:*:*:*
- cpe:2.3:a:grafana:grafana:12.2.8:-:*:*:*:*:*:*
- cpe:2.3:a:grafana:grafana:12.2.8:security01:*:*:*:*:*:*
- cpe:2.3:a:grafana:grafana:12.3.6:-:*:*:*:*:*:*
- cpe:2.3:a:grafana:grafana:12.3.6:security01:*:*:*:*:*:*
- cpe:2.3:a:grafana:grafana:12.4.3:-:*:*:*:*:*:*
- cpe:2.3:a:grafana:grafana:13.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:grafana:grafana:13.0.1:-:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

grafana.com/security/security-advisories/cve-2026-28380nvdVendor Advisory

News mentions

0

No linked articles in our index yet.