https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T12:30:08.977709+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-11642 cnvd-2017-11642 2026-10-24T12:30:09.025872+00:00 cnvd-2017-11642 https://cve.radiocsirt.org/vuln/euvd-2026-75316 EUVD-2026-75316 2026-10-24T12:30:09.025907+00:00 EUVD-2026-75316 https://cve.radiocsirt.org/vuln/fkie_cve-2017-8438 fkie_cve-2017-8438 2026-10-24T12:30:09.025921+00:00

Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bug prevents transitioning into the specified user specified in a run_as request. If a role has been created using a template that contains the _user properties, the behavior of run_as will be incorrect. Additionally if the run_as user specified does not exist, the transition will not happen.

 https://cve.radiocsirt.org/vuln/ghsa-c4fv-4x26-f38h GHSA-c4fv-4x26-f38h 2026-10-24T12:30:09.025953+00:00

Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bug prevents transitioning into the specified user specified in a run_as request. If a role has been created using a template that contains the _user properties, the behavior of run_as will be incorrect. Additionally if the run_as user specified does not exist, the transition will not happen.

 https://cve.radiocsirt.org/vuln/gsd-2017-8438 gsd-2017-8438 2026-10-24T12:30:09.025970+00:00 gsd-2017-8438