CVE-2026-14242

A user with the Editor role could delete, move, push or pull Git Sync managed resources in folders where they only had view access, by creating a provisioning job through the jobs resource API, which skipped the folder permission checks incorrect authorization...

CVE-2026-111000

A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they administer, and so gain Admin on the moved folder and its contents, including the right to change their permissions. The legacy folder move API refuses the same move improper...

CVE-2026-111024

A user with the Viewer or Editor role could bypass folder permissions on Git Sync managed resources through the repository files API: a Viewer could read files in folders they could not access, and an Editor could create, modify, move or delete provisioned dashboards and folders there incorrect...

CVE-2026-111000 Privilege escalation through folder move in the folders API

A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they administer, and so gain Admin on the moved folder and its contents, including the right to change their permissions. The legacy folder move API refuses the same move improper...

CVE-2026-111000

A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they administer, and so gain Admin on the moved folder and its contents, including the right to change their permissions. The legacy folder move API refuses the same move improper...

CVE-2026-111000

A privilege escalation vulnerability exists in the folders resource API where a user with the Editor role can move a folder they have permission to edit into a folder they already administer. This action allows the user to gain Admin rights over the moved folder and its contents, including the ab...

EUVD-2026-123537

A user with the Editor role could delete, move, push or pull Git Sync managed resources in folders where they only had view access, by creating a provisioning job through the jobs resource API, which skipped the folder permission checks incorrect authorization...

CVE-2026-14242

A user with the Editor role could delete, move, push or pull Git Sync managed resources in folders where they only had view access, by creating a provisioning job through the jobs resource API, which skipped the folder permission checks incorrect authorization...

CVE-2026-14242

A user with the Editor role can perform unauthorized actions, such as deleting, moving, pushing, or pulling Git Sync managed resources , in folders where they only have view access. This is due to an incorrect authorization flaw in the jobs resource API , which fails to perform necessary folder p...

CVE-2026-14242 Authorization bypass in the Git Sync provisioning jobs API

A user with the Editor role could delete, move, push or pull Git Sync managed resources in folders where they only had view access, by creating a provisioning job through the jobs resource API, which skipped the folder permission checks incorrect authorization...

Welcart e-Commerce < 2.11.32 - SQL Injection

Welcart e-Commerce WordPress plugin 2.11.32 contains a SQL injection caused by improper sanitization of values from imported CSV files, letting users with Editor role and above execute arbitrary SQL commands, exploit requires Editor or higher privileges. id: CVE-2026-16065 info: name: Welcart...

PT-2026-145248

A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they administer, and so gain Admin on the moved folder and its contents, including the right to change their permissions. The legacy folder move API refuses the same move improper...

CVE-2026-110992: Grafana: A user who can create Git Sync provisioning jobs (the Editor role by default) could delete or move files outside the…

A user who can create Git Sync provisioning jobs the Editor role by default could delete or move files outside the configured repository path with a job that references a resource whose source path contains ../ sequences path traversal. With a local filesystem repository on versions before 13.0.4...

CVE-2026-111000: Grafana: A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they…

A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they administer, and so gain Admin on the moved folder and its contents, including the right to change their permissions. The legacy folder move API refuses the same move improper...

PT-2026-145254

A user with the Editor role could delete, move, push or pull Git Sync managed resources in folders where they only had view access, by creating a provisioning job through the jobs resource API, which skipped the folder permission checks incorrect authorization...

CVE-2026-72585-PoC

CVE-2026-72585 — Grafana: Incomplete Fix for CVE-2026-21724 Allows Editor Role to Delete Protected Contact Points Product: Grafana Grafana Labs — through 13.2.0 File: pkg/services/ngalert/provisioning/contactpoints.go CWE: CWE-284 — Improper Access Control CVSS 3.1:...

CVE-2026-125750 Firekylin through 2.18.1 Improper Authorization via Admin REST API GET Actions

Firekylin through 2.18.1 contains an improper authorization vulnerability that allows editor-role users to read administrator-only secrets because the admin API base guard permits all GET actions. Editors can query options.js for TOTP secrets, push credentials, and cloud storage keys, or user.js...

CVE-2026-125750

Firekylin through 2.18.1 contains an improper authorization vulnerability that allows editor-role users to read administrator-only secrets because the admin API base guard permits all GET actions. Editors can query options.js for TOTP secrets, push credentials, and cloud storage keys, or user.js...

CVE-2026-104648

The weMail WordPress plugin through 2.1.6 does not restrict a site-wide third-party email-service API key to administrators, exposing it in an admin screen that users with the Editor role can reach by default, which allows them to obtain a reusable credential usable without a WordPress session to...

EUVD-2026-115683

The weMail WordPress plugin through 2.1.6 does not restrict a site-wide third-party email-service API key to administrators, exposing it in an admin screen that users with the Editor role can reach by default, which allows them to obtain a reusable credential usable without a WordPress session to...