https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:42:03.164230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-670 certfr-2021-avi-670 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Elles permettent à un attaquant de provoquer… 2026-10-04T17:42:03.240703+00:00 certfr-2021-avi-670 https://cve.radiocsirt.org/vuln/euvd-2026-235623 EUVD-2026-235623 2026-10-04T17:42:03.240748+00:00 EUVD-2026-235623 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37936 fkie_cve-2021-37936 2026-10-04T17:42:03.240763+00:00

It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be rendered for the user.

 https://cve.radiocsirt.org/vuln/ghsa-p8x3-m7c8-mcj5 GHSA-p8x3-m7c8-mcj5 2026-10-04T17:42:03.240791+00:00

It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be rendered for the user.

 https://cve.radiocsirt.org/vuln/gsd-2021-37936 gsd-2021-37936 2026-10-04T17:42:03.240807+00:00 gsd-2021-37936 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0029 WID-SEC-W-2022-0029 — Elasticsearch und Kibana: Mehrere Schwachstellen 2026-10-04T17:42:03.240818+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch und Kibana ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen und um Administratorrechte zu erlangen.