Threats Tagged 'cve-2026-14199'
View all threats tagged with 'cve-2026-14199'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-14199'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-14199: CWE-290 in Grafana Grafana EnterpriseCVE-2026-14199 0 Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user's, while that user's cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing). Join the discussion | CVE Database V5 | 09/02/2026, 16:06:28 UTC Added: 09/02/2026, 16:22:57 UTC |
Showing 1 to 1 of 1 result