CVE-2026-19726

Name of the Vulnerable Software and Affected Versions Visualizer versions prior to 4.0.7

Description Insufficient authorization in the plugin allows users with the Contributor role and above to read the full configuration of any chart on the site. This includes charts that the interface normally restricts and allows the retrieval of all chart configurations in a single request. The exposed configuration may contain credentials for remote data sources used by the charts.

Recommendations Update to version 4.0.7 or later.