https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 17:28:32 +0000 https://db.gcve.eu/vuln/cve-2026-111000 <p><strong>Affected:</strong> Grafana Enterprise, Grafana OSS</p> <p>A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they administer, and so gain Admin on the moved folder and its contents, including the right to change their permissions. The legacy folder move API refuses the same move (improper privilege management).</p> <p><strong>Affected:</strong> Grafana Enterprise, Grafana OSS</p> <p>A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they administer, and so gain Admin on the moved folder and its contents, including the right to change their permissions. The legacy folder move API refuses the same move (improper privilege management).</p> https://db.gcve.eu/vuln/cve-2026-111000