CVE-2026-103506High· 8.9▾ TwilightAn authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions (missing authorization). This affects Grafana OSS and Enterprise 13.2 installations with the experimental…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 49 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions (missing authorization). This affects Grafana OSS and Enterprise 13.2 installations with the experimental kubernetesSsoSettingsApi feature toggle enabled, which is disabled by default.
enterprise >= 13.2.0 <= 13.2.4oss >= 13.2.0 <= 13.2.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-100105High· 7.7Alerting contact point authorization bypass via schema downgrade
CVE-2026-88967High· 7.7Azure Monitor access token disclosure via SSRF
CVE-2026-16491Medium· 6.5CVE-2026-16491 CVE Record
CVE-2026-92539Medium· 6.7Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise
CVE-2026-9703High· 7.1Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources
CVE-2026-13720Medium· 5.4An Editor can set file-provisioning metadata (the grafana.app/managedBy, grafana.app/managerId and grafana.app/sourcePath annotations) when creating a dashboard through the dashboard API, because these fields were stored without an autho…