Grafana Enterprise — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Grafana Enterprise, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-13719	Alert rules in restricted folders disclosed via the alert rules list API CWE-863	4.3	Medium	2026-09-30
CVE-2026-81842	Library panel can be moved into a folder without library panel create permission CWE-863	4.3	Medium	2026-09-29
CVE-2026-81841	Paused shared dashboard access tokens still expose data source configuration CWE-862	5.3	Medium	2026-09-29
CVE-2026-14199	Session takeover via Auth Proxy cache key collision CWE-290	7.1	High	2026-09-02
CVE-2026-12704	SAML assertion replay via skipped InResponseTo validation CWE-294	6.8	Medium	2026-09-02
CVE-2026-28378	Cross-Organization Public Dashboard Deletion via Missing Org Isolation	3.1	Low	2026-07-07
CVE-2026-42127	Pre-authentication denial of service in the public dashboard query endpoint CWE-400	7.5	High	2026-06-22
CVE-2025-41115	Incorrect privilege assignment	10.0	Critical	2025-11-21
CVE-2023-4399	Grafana 安全漏洞 CWE-183	6.6	Medium	2023-10-17
CVE-2023-4822	Grafana 安全漏洞 CWE-269	6.7	Medium	2023-10-16

All 10 known CVE vulnerabilities affecting Grafana Enterprise with full Chinese analysis, references, and POCs where available.