Retour à la veille
CVE-2026-28378
Score CVSS
3.1
LOW
Description détaillée
The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers.
Vecteur d'attaque (CVSS)
Vecteur brut :CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Références et Patchs
Dernières Vulnérabilités
CVE-2026-60002
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)
VOIR DÉTAILS
CVE-2026-60001
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
VOIR DÉTAILS
CVE-2026-60000
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
VOIR DÉTAILS