https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:31:57.500184+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15212 bdu:2026-15212 2026-10-04T09:31:57.566033+00:00 bdu:2026-15212 https://cve.radiocsirt.org/vuln/bit-elk-2026-33464 BIT-elk-2026-33464 — Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 2026-10-04T09:31:57.566070+00:00

Affected: Bitnami: elk

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding a low-privileged role can submit a specially crafted, oversized payload to an internal Kibana API, causing the Kibana process to exhaust available resources and become unresponsive to all users until the service recovers or is restarted.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 certfr-2026-avi-0661 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-10-04T09:31:57.566105+00:00 certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-322796 EUVD-2026-322796 2026-10-04T09:31:57.566122+00:00 EUVD-2026-322796 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33464 fkie_cve-2026-33464 2026-10-04T09:31:57.566134+00:00

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding a low-privileged role can submit a specially crafted, oversized payload to an internal Kibana API, causing the Kibana process to exhaust available resources and become unresponsive to all users until the service recovers or is restarted.

 https://cve.radiocsirt.org/vuln/ghsa-r7m3-v6c2-v4vr GHSA-r7m3-v6c2-v4vr 2026-10-04T09:31:57.566156+00:00

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding a low-privileged role can submit a specially crafted, oversized payload to an internal Kibana API, causing the Kibana process to exhaust available resources and become unresponsive to all users until the service recovers or is restarted.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734 WID-SEC-W-2026-1734 — Kibana: Mehrere Schwachstellen 2026-10-04T09:31:57.566171+00:00

Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.