CVE-2026-15577 in Grafana
要約
〜によって MITRE • 2026年10月13日
A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorization). On Grafana 12.4 the affected API is only available when the experimental provisioning feature toggle is enabled.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.