https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 08:32:25 +0000 https://cve.radiocsirt.org/vuln/cve-2025-3580 <p><strong>Affected:</strong> Grafana</p> <p>An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint.</p> <p>The vulnerability can be exploited when:</p> <p>1. An Organization administrator exists</p> <p>2. The Server administrator is either:</p> <p>- Not part of any organization, or - Part of the same organization as the Organization administrator Impact:</p> <p>- Organization administrators can permanently delete Server administrator accounts</p> <p>- If the only Server administrator is deleted, the Grafana instance becomes unmanageable</p> <p>- No super-user permissions remain in the system</p> <p>- Affects all users, organizations, and teams managed in the instance</p> <p>The vulnerability is particularly serious as it can lead to a complete loss of administrative control over the Grafana instance.</p> <p><strong>Affected:</strong> Grafana</p> <p>An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint.</p> <p>The vulnerability can be exploited when:</p> <p>1. An Organization administrator exists</p> <p>2. The Server administrator is either:</p> <p>- Not part of any organization, or - Part of the same organization as the Organization administrator Impact:</p> <p>- Organization administrators can permanently delete Server administrator accounts</p> <p>- If the only Server administrator is deleted, the Grafana instance becomes unmanageable</p> <p>- No super-user permissions remain in the system</p> <p>- Affects all users, organizations, and teams managed in the instance</p> <p>The vulnerability is particularly serious as it can lead to a complete loss of administrative control over the Grafana instance.</p> https://cve.radiocsirt.org/vuln/cve-2025-3580