PT-2026-23110

Name of the Vulnerable Software and Affected Versions Drupal AJAX Dashboard versions prior to 3.1.0 Description A missing authentication check for a critical function in Drupal AJAX Dashboard allows exploitation of incorrectly configured access control security levels. The issue resides in the AJ...

CVE-2026-27942 vulnerabilities

Vulnerabilities for packages: prism, tileserver-gl, opensearch-dashboards, renovate, saf, jitsucom-jitsu, kubeflow-pipelines...

GHSA-FJ3W-JWP8-X2G3 vulnerabilities

Vulnerabilities for packages: prism, tileserver-gl, opensearch-dashboards, renovate, saf, jitsucom-jitsu, kubeflow-pipelines...

GHSA-FJ3W-JWP8-X2G3 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, renovate, langfuse, opensearch-dashboards, saf, librechat, dbgate, opensearch-dashboards-fips, tileserver-gl, kibana, prism, tileserver-gl-fips, kubeflow-pipelines, dbgate-fips...

CVE-2026-27942 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, renovate, langfuse, opensearch-dashboards, saf, librechat, dbgate, opensearch-dashboards-fips, tileserver-gl, kibana, prism, tileserver-gl-fips, kubeflow-pipelines, dbgate-fips...

GHSA-67PG-WM7F-Q7FJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-25940 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-P5XG-68WR-HM3M vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-25535 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-9VJF-QC39-JPRP vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-25755 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-25755 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-25940 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

GHSA-9VJF-QC39-JPRP vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

GHSA-67PG-WM7F-Q7FJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-25535 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

GHSA-P5XG-68WR-HM3M vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

GHSA-GQ3J-XVXP-8HRF vulnerabilities

Vulnerabilities for packages: langfuse...

grafana/grafana/pkg/services/dashboards: Grafana Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation

An authorization error has been discovered in Grafana dashboards. The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions: action. As a result, a user who has permission management rights on one dashboard can read and modify permissions ...

BIT-GRAFANA-2026-21722 Public Dashboards time range restriction on annotations can be bypassed

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any...