<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-04T14:36:13.110086+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2026-15303</id>
    <title>bdu:2026-15303</title>
    <updated>2026-10-04T14:36:13.184612+00:00</updated>
    <content>bdu:2026-15303</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2026-15303"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bit-elk-2026-42400</id>
    <title>BIT-elk-2026-42400 — Uncontrolled Resource Consumption in Kibana Leading to Denial of Service</title>
    <updated>2026-10-04T14:36:13.184648+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Bitnami: elk</p>
<p>Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compressed request payload that is processed prior to authorization checks, causing excessive memory and CPU resource consumption that can result in a Kibana instance becoming unresponsive or crashing.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bit-elk-2026-42400"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661</id>
    <title>certfr-2026-avi-0661 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant…</title>
    <updated>2026-10-04T14:36:13.184681+00:00</updated>
    <content>certfr-2026-avi-0661</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-322893</id>
    <title>EUVD-2026-322893</title>
    <updated>2026-10-04T14:36:13.184699+00:00</updated>
    <content>EUVD-2026-322893</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-322893"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2026-42400</id>
    <title>fkie_cve-2026-42400</title>
    <updated>2026-10-04T14:36:13.184710+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compressed request payload that is processed prior to authorization checks, causing excessive memory and CPU resource consumption that can result in a Kibana instance becoming unresponsive or crashing.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2026-42400"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-mhgf-jqhm-p7p3</id>
    <title>GHSA-mhgf-jqhm-p7p3</title>
    <updated>2026-10-04T14:36:13.184731+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user can send a specially crafted compressed request payload that is processed prior to authorization checks, causing excessive memory and CPU resource consumption that can result in a Kibana instance becoming unresponsive or crashing.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-mhgf-jqhm-p7p3"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734</id>
    <title>WID-SEC-W-2026-1734 — Kibana: Mehrere Schwachstellen</title>
    <updated>2026-10-04T14:36:13.184746+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734"/>
  </entry>
</feed>
