https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:02:30.061279+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-21721 CVE-2026-21721 — Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation 2026-10-06T18:02:30.077234+00:00

Affected: grafana/grafana, grafana/grafana-enterprise, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Advanced Cluster Management for Kubernetes 2.11, Red Hat Advanced Cluster Management for Kubernetes 2.12, Red Hat Advanced Cluster Management for Kubernetes 2.13, Red Hat Multicluster Global Hub and 4 more

The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.