CVE-2026-72585 | Grafana Labs up to 13.2.0 Delete Path contactpoints.go authorization

August 10, 2026 Yanac

A vulnerability was found in Grafana Labs Grafana up to 13.2.0 and classified as problematic. This vulnerability affects unknown code of the file pkg/services/ngalert/provisioning/contactpoints.go of the component Delete Path. Executing a manipulation can lead to authorization bypass.

This vulnerability is tracked as CVE-2026-72585. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More