https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:21:04.853790+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15213 bdu:2026-15213 2026-10-04T08:21:04.857991+00:00 bdu:2026-15213 https://cve.radiocsirt.org/vuln/bit-elk-2026-42398 BIT-elk-2026-42398 — Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access 2026-10-04T08:21:04.858019+00:00

Affected: Bitnami: elk

Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 certfr-2026-avi-0661 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-10-04T08:21:04.858049+00:00 certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-322891 EUVD-2026-322891 2026-10-04T08:21:04.858065+00:00 EUVD-2026-322891 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42398 fkie_cve-2026-42398 2026-10-04T08:21:04.858077+00:00

Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.

 https://cve.radiocsirt.org/vuln/ghsa-43ww-gwmw-f89v GHSA-43ww-gwmw-f89v 2026-10-04T08:21:04.858098+00:00

Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734 WID-SEC-W-2026-1734 — Kibana: Mehrere Schwachstellen 2026-10-04T08:21:04.858113+00:00

Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.