Is CVE-2026-28378 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-28378?

CVE-2026-28378 has a CVSS v3 severity of LOW (3.1).

Back

CVE-2026-28378

Description

The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers.