https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T00:02:55.524080+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-256457 EUVD-2026-256457 2026-10-09T00:02:55.603725+00:00 EUVD-2026-256457 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3120 fkie_cve-2014-3120 2026-10-09T00:02:55.603766+00:00

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.

 https://cve.radiocsirt.org/vuln/ghsa-mrfm-jxgf-2h6v GHSA-mrfm-jxgf-2h6v — Elasticsearch Improper Access Control vulnerability 2026-10-09T00:02:55.603801+00:00

Affected: Maven: org.elasticsearch:elasticsearch

The default configuration in Elasticsearch before 1.4.0.Beta1 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.

 https://cve.radiocsirt.org/vuln/gsd-2014-3120 gsd-2014-3120 2026-10-09T00:02:55.603828+00:00 gsd-2014-3120 https://cve.radiocsirt.org/vuln/rhsa-2014:1170 RHSA-2014:1170 — Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.1.0 security update 2026-10-09T00:02:55.603840+00:00

elasticsearch: remote code execution flaw via dynamic scripting