CVE-2026-103506 - SSO settings authorization bypass
CVE ID :CVE-2026-103506 Published : Oct. 28, 2026, 5:17 p.m. | 1 hour, 7 minutes ago Description :An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required permissions (missing authorization). This affects Grafana OSS and...