https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T04:53:29.446177+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00896 bdu:2025-00896 2026-10-17T04:53:29.451039+00:00 bdu:2025-00896 https://cve.radiocsirt.org/vuln/bit-elk-2024-43707 BIT-elk-2024-43707 — Kibana exposure of sensitive information to an unauthorized actor 2026-10-17T04:53:29.451076+00:00

Affected: Bitnami: elk

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0062 certfr-2025-avi-0062 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Elles permettent à un attaquant de provoquer… 2026-10-17T04:53:29.451110+00:00 certfr-2025-avi-0062 https://cve.radiocsirt.org/vuln/euvd-2026-211525 EUVD-2026-211525 2026-10-17T04:53:29.451127+00:00 EUVD-2026-211525 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43707 fkie_cve-2024-43707 2026-10-17T04:53:29.451139+00:00

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

 https://cve.radiocsirt.org/vuln/ghsa-54qw-wcc8-qjp6 GHSA-54qw-wcc8-qjp6 2026-10-17T04:53:29.451160+00:00

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0179 WID-SEC-W-2025-0179 — Kibana: Mehrere Schwachstellen 2026-10-17T04:53:29.451175+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Informationen preiszugeben, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu erzeugen.