CVE-2026-27877 — Public dashboards discloses all direct mode datasources
When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources …
Published: 2026-03-27 · CVSS: 6.5 · CVSS 3.1
When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards. No passwords of proxied data-sources are exposed. We encourage all direct data-sources to be converted to proxied data-sources as far as possible to improve your deployments' security.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7