https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 17:03:09 +0000 https://db.gcve.eu/vuln/cve-2026-81841 <p><strong>Affected:</strong> Grafana Enterprise, Grafana OSS</p> <p>Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard&#39;s data sources, including stored credentials for data sources using browser access (missing authorization). Deleting the shared dashboard does revoke the token.</p> <p><strong>Affected:</strong> Grafana Enterprise, Grafana OSS</p> <p>Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard&#39;s data sources, including stored credentials for data sources using browser access (missing authorization). Deleting the shared dashboard does revoke the token.</p> https://db.gcve.eu/vuln/cve-2026-81841