https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-28T07:15:31.029755+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-16491 fkie_cve-2026-16491 2026-10-28T07:15:31.047539+00:00

Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted dashboard listings. A user with dashboard permission-management rights on any folder could therefore be treated as an administrator of every folder.

This could expose deleted dashboard items from folders where the user lacked administrative access. The fix requires permission on the specified folder, an ancestor, or a wildcard scope.

 https://db.gcve.eu/vuln/ghsa-6xjg-5qmq-rh74 GHSA-6xjg-5qmq-rh74 2026-10-28T07:15:31.047636+00:00

Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted dashboard listings. A user with dashboard permission-management rights on any folder could therefore be treated as an administrator of every folder.

This could expose deleted dashboard items from folders where the user lacked administrative access. The fix requires permission on the specified folder, an ancestor, or a wildcard scope.