https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:32:44.048332+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-670 certfr-2021-avi-670 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Elles permettent à un attaquant de provoquer… 2026-10-03T04:32:44.109678+00:00 certfr-2021-avi-670 https://cve.radiocsirt.org/vuln/euvd-2026-205377 EUVD-2026-205377 2026-10-03T04:32:44.109720+00:00 EUVD-2026-205377 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22150 fkie_cve-2021-22150 2026-10-03T04:32:44.109740+00:00

It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.

 https://cve.radiocsirt.org/vuln/ghsa-534g-6jq4-vq89 GHSA-534g-6jq4-vq89 2026-10-03T04:32:44.109770+00:00

It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older version of the js-yaml library, this package would be loaded in an insecure manner, allowing an attacker to execute commands on the Kibana server.

 https://cve.radiocsirt.org/vuln/gsd-2021-22150 gsd-2021-22150 2026-10-03T04:32:44.109786+00:00 gsd-2021-22150 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0029 WID-SEC-W-2022-0029 — Elasticsearch und Kibana: Mehrere Schwachstellen 2026-10-03T04:32:44.109797+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.