https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:54:40.005089+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elk-2026-49089 BIT-elk-2026-49089 — Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 2026-10-05T13:54:40.014629+00:00

Affected: Bitnami: elk

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A query expression accepted by a connector reporting operation was processed without any limit on its size, and an oversized expression caused the Kibana process to spend an unbounded amount of time evaluating it. An authenticated user with read-only privileges was able to send a single request that left Kibana unable to serve any user until the process was restarted.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0826 certfr-2026-avi-0826 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-05T13:54:40.014685+00:00 certfr-2026-avi-0826 https://cve.radiocsirt.org/vuln/euvd-2026-352359 EUVD-2026-352359 2026-10-05T13:54:40.014705+00:00 EUVD-2026-352359 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49089 fkie_cve-2026-49089 2026-10-05T13:54:40.014717+00:00

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A query expression accepted by a connector reporting operation was processed without any limit on its size, and an oversized expression caused the Kibana process to spend an unbounded amount of time evaluating it. An authenticated user with read-only privileges was able to send a single request that left Kibana unable to serve any user until the process was restarted.

 https://cve.radiocsirt.org/vuln/ghsa-qp79-577v-7mj4 GHSA-qp79-577v-7mj4 2026-10-05T13:54:40.014740+00:00

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A query expression accepted by a connector reporting operation was processed without any limit on its size, and an oversized expression caused the Kibana process to spend an unbounded amount of time evaluating it. An authenticated user with read-only privileges was able to send a single request that left Kibana unable to serve any user until the process was restarted.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2179 WID-SEC-W-2026-2179 — Kibana: Mehrere Schwachstellen 2026-10-05T13:54:40.014756+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.