PT-2026-50264

🗓️ 17 Jun 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 18 Views

Authenticated users could access alert instances of unauthorized alert groups; upgrade DolphinScheduler to 3.4.2.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2026-47340	17 Jun 202602:48	–	circl
CVE	CVE-2026-47340	17 Jun 202609:00	–	cve
Cvelist	CVE-2026-47340 Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.	17 Jun 202609:00	–	cvelist
EUVD	EUVD-2026-37584	17 Jun 202618:35	–	euvd
Github Security Blog	Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.	17 Jun 202618:35	–	github
NVD	CVE-2026-47340	17 Jun 202613:20	–	nvd
OSV	GHSA-694G-J8PJ-CJJ5 Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.	17 Jun 202618:35	–	osv
Snyk	Incorrect Authorization	17 Jun 202610:21	–	snyk
vulnersOsv	org.apache.dolphinscheduler:dolphinscheduler-dist (>=3.3.2 <=3.4.1), org.apache.dolphinscheduler:dolphinscheduler-standalone-server (>=3.0.0 <=3.0.6) potentially affected by CVE-2026-47340 via org.apache.dolphinscheduler:dolphinscheduler-api (>=3.0.0-alpha <=3.4.1)	17 Jun 202610:21	–	vulnersosv
vulnersOsv	com.webank.wedatasphere.dss:dolphinscheduler-prod-metrics (>=1.1.0 <=1.2.2), org.apache.dolphinscheduler:dolphinscheduler-dist (>=2.0.0 <=3.4.1) +2 more potentially affected by CVE-2026-47340 via org.apache.dolphinscheduler:dolphinscheduler-api (>=1.3.9 <=3.4.1)	17 Jun 202618:35	–	vulnersosv