https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:34:05.979520+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15211 bdu:2026-15211 2026-10-02T19:34:05.984498+00:00 bdu:2026-15211 https://cve.radiocsirt.org/vuln/bit-elk-2026-33463 BIT-elk-2026-33463 — Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access 2026-10-02T19:34:05.984536+00:00

Affected: Bitnami: elk

Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. A logic error in how expiration timestamps were validated allowed a time-bounded access token to remain usable beyond its intended validity window, enabling an unauthenticated actor in possession of the token to retrieve the associated content after expiration.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 certfr-2026-avi-0661 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-10-02T19:34:05.984570+00:00 certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-322846 EUVD-2026-322846 2026-10-02T19:34:05.984587+00:00 EUVD-2026-322846 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33463 fkie_cve-2026-33463 2026-10-02T19:34:05.984598+00:00

Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. A logic error in how expiration timestamps were validated allowed a time-bounded access token to remain usable beyond its intended validity window, enabling an unauthenticated actor in possession of the token to retrieve the associated content after expiration.

 https://cve.radiocsirt.org/vuln/ghsa-fgvg-65vf-2w8h GHSA-fgvg-65vf-2w8h 2026-10-02T19:34:05.984620+00:00

Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. A logic error in how expiration timestamps were validated allowed a time-bounded access token to remain usable beyond its intended validity window, enabling an unauthenticated actor in possession of the token to retrieve the associated content after expiration.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734 WID-SEC-W-2026-1734 — Kibana: Mehrere Schwachstellen 2026-10-02T19:34:05.984635+00:00

Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.