Search: CVE-2026-21721

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.7%	CVE-2026-21721grafana/grafana · Incorrect Authorization High8.1EPSS 0.7%2026-01-27CVE Database V5CVE-2026-21721 The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation. EPSS 0.7%Vulnerability CWE-863	CVE Database V5	2026-01-27

Page 1 of 1 · 1 duplicate CVE record merged