CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. See the original NVD description below for full technical details.
CVE
CVE-2026-21724
Severity
MEDIUM
CVSS
5.4
EPSS
0.24%
Original NVD Description
A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URLs without the required alert.notifications.receivers.protected:write permission.
Related CVEs
Other vulnerabilities affecting the same vendor(s)