1405 matches found
CVE-2026-24133 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...
GHSA-VM32-VV63-W422 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...
CVE-2026-24040 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...
TeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure
Cybersecurity researchers have called attention to a "massive campaign" that has systematically targeted cloud native environments to set up malicious infrastructure for follow-on exploitation. The activity, observed around December 25, 2025, and described as "worm-driven," leveraged exposed Dock...
WeKan security vulnerabilities
WeKan is an open-source dashboard application developed by WeKan. Versions of WeKan prior to 8.19 contained security vulnerabilities. These vulnerabilities stemmed from the fact that the configuration setting “allowPrivateOnly” was not fully enforced when creating a dashboard. When...
GHSA-8R9Q-7V3J-JR4G vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-0621 vulnerabilities
Vulnerabilities for packages: langfuse...
Grafana Labs 10.2.0 < 11.6.9+security-01 / 12.0.0 < 12.0.8+security-01 / 12.1.0 < 12.1.5+security-01 / 12.2.0 < 12.2.3+security-01 / 12.3.0 < 12.3.1+security-01 Privilege Escalation (CVE-2026-21721)
The version of Grafana Labs installed on the remote host is affected by a privilege escalation vulnerability as referenced in the CVE-2026-21721 advisory. - The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions: action. As a result, a...
Human-Centered Explainability in AI-Enhanced UI Security Interfaces: Designing Trustworthy Copilots for Cybersecurity Analysts
Artificial intelligence AI copilots are increasingly integrated into enterprise cybersecurity platforms to assist analysts in threat detection, triage, and remediation. However, the effectiveness of these systems depends not only on the accuracy of underlying models but also on the degree to whic...
CVE-2026-21721
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions: action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege...
CVE-2026-0713
A security vulnerability in the /apis/dashboard.grafana.app/ endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions v0alpha1, v1alpha1, v2alpha1. Impact: - Viewers can view all dashboards/folders regardless of permissions -...
CVE-2026-0713
The Red Hat/CIRCL/EUVD/PTSecurity entries confirm a security issue in Grafana’s API at /apis/dashboard.grafana.app/* affecting all API versions (v0alpha1, v1alpha1, v2alpha1). Root cause: authenticated users can bypass dashboard and folder permissions, allowing Viewer role to access all dashboard...
CVE-2025-57810 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-8MVJ-3J78-4QMW vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-F8CM-6447-X5H2 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2025-68428 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2025-57810 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...