All CVEs — page 55 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
A server-side request forgery (SSRF) vulnerability in Azure Managed Grafana allows unauthenticated remote attackers to manipulate the application into making unintended internal network requests, leading to privilege escalation. This occurs due to insufficient validation of user-supplied URLs used in backend HTTP requests.
CVE-2026-114146 is an incorrect authorization flaw in ASP.NET Core that permits an already authenticated, low-privileged user to gain elevated privileges over the network. This violates the principle of least privilege and could allow attackers to access or modify resources beyond their intended permissions.