CVE-2026-9765

Katalog CVE

CVSS 7.1 · High EPSS 0,40%

Kerentanan Improper Access Control. Skor CVSS 3.1 7.1 (High) menurut grafana.com.

Deskripsi (NVD)

Note: The CVE and blog post don't exist because we determined this is actually a cloud-only issue. Access Controls are “Broken” when a user can access resources they are not authorized to access. An attacker can bypass any access control mechanisms in a web application, and gain unauthorized access to resources that are not available with their permissions. Broken access control can allow attackers to: Access resources only accessible to certain users, thus allowing unauthorized access to data Perform operations on behalf of other users, leading to account takeovers in the worst cases Attempt privilege escalation Attempt to take over an account

Rincian

Terbit di NVD

24 Juli 2026

Terakhir diubah

30 Juli 2026

Status NVD

Deferred

CVSS 3.1

7.1 (High), sumber grafana.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,6% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://grafana.com/security/security-advisories/cve-2026-9765