https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T17:15:09.932377+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-82014 fkie_cve-2026-82014 2026-11-14T17:15:09.936808+00:00

Any authenticated user, including a Viewer, could change the preferences of any team, such as its home dashboard, theme and timezone, through an undocumented endpoint with no access control, and so redirect every member of that team to a dashboard of their choice (missing authorization).

 https://db.gcve.eu/vuln/ghsa-68ff-q76g-g93f GHSA-68ff-q76g-g93f 2026-11-14T17:15:09.936862+00:00

Any authenticated user, including a Viewer, could change the preferences of any team, such as its home dashboard, theme and timezone, through an undocumented endpoint with no access control, and so redirect every member of that team to a dashboard of their choice (missing authorization).

 https://db.gcve.eu/vuln/wid-sec-w-2026-4568 WID-SEC-W-2026-4568 — Grafana: Mehrere Schwachstellen 2026-11-14T17:15:09.936881+00:00

Ein Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.