https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:11:27 +0000 https://vulnerability.circl.lu/vuln/cve-2026-21727 <p><strong>Affected:</strong> Grafana Correlations</p> <p>A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy correlation records. Due to a backward compatibility condition allowing org_id = 0 records to be returned across organizations, a user with datasource management privileges could read and permanently delete legacy correlation data belonging to another organization. This issue affects correlations created prior to Grafana 10.2 and is fixed in &gt;=11.6.11, &gt;=12.0.9, &gt;=12.1.6, and &gt;=12.2.4.</p> <p>Thanks to Gyu-hyeok Lee (g2h) for reporting this vulnerability.</p> <p><strong>Affected:</strong> Grafana Correlations</p> <p>A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy correlation records. Due to a backward compatibility condition allowing org_id = 0 records to be returned across organizations, a user with datasource management privileges could read and permanently delete legacy correlation data belonging to another organization. This issue affects correlations created prior to Grafana 10.2 and is fixed in &gt;=11.6.11, &gt;=12.0.9, &gt;=12.1.6, and &gt;=12.2.4.</p> <p>Thanks to Gyu-hyeok Lee (g2h) for reporting this vulnerability.</p> https://vulnerability.circl.lu/vuln/cve-2026-21727