https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T04:42:52.916184+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-39403 cnvd-2019-39403 2026-10-25T04:42:52.978371+00:00 cnvd-2019-39403 https://cve.radiocsirt.org/vuln/euvd-2026-51576 EUVD-2026-51576 2026-10-25T04:42:52.978409+00:00 EUVD-2026-51576 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7619 fkie_cve-2019-7619 2026-10-25T04:42:52.978424+00:00

Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.

 https://cve.radiocsirt.org/vuln/ghsa-hxp8-r9g3-grfr GHSA-hxp8-r9g3-grfr — Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch 2026-10-25T04:42:52.978454+00:00

Affected: Maven: org.elasticsearch:elasticsearch

Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.

 https://cve.radiocsirt.org/vuln/gsd-2019-7619 gsd-2019-7619 2026-10-25T04:42:52.978478+00:00 gsd-2019-7619