Vulnerabilities CVE-2026-21722

CVE-2026-21722

Medium

Open

TLP:CLEAR

Public Dashboards time range restriction on annotations can be bypassed

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

Public dashboards with annotations enabled did not limit their annotation timerange to the locked timerange of the public dashboard. This means one could read the entire history of annotations visible on the specific dashboard, even those outside the locked timerange. This did not leak any annotations that would not otherwise be visible on the public dashboard.

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.33%

25.2th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Confidence: 90%
Published: Feb 12, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.