Fixed
- The Security page showed the whole fleet to users restricted to specific sites. If you had scoped a user (or an admin) to a subset of sites, the Security page — and the CVE banner on the dashboard, and the CVE badges on the device cards — still listed every device in the installation, with names, addresses and RouterOS versions. Those three views now respect the same per-site permissions as the rest of the app, and asking about a device outside your sites returns "not found". Superadmins and unrestricted users are unaffected. Present since CVE alerting was introduced in v1.22.0 — worth upgrading if you use scoped users.