CVE-2026-28374
Editors could delete any annotation, even those they do not have read access to.
Published May 13, 2026 · updated Jun 17, 2026 · grafana grafana
Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 13, 2026 · NIST NVD
Detected
Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.
Jun 17, 2026 · NIST NVD
Updated
Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.
Affected
- cpe grafana/grafanaversion unspecified
- cpe grafana/grafana11.6.14
- cpe grafana/grafana12.2.8
Sources
- CVE.orgVulnerability recordCVE-2026-28374
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-28374
Editors could delete any annotation, even those they do not have read access to. The editor user cannot create or read the annotations.
nvd.nist.gov