https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:57:35.071738+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15218 bdu:2026-15218 2026-10-04T12:57:35.141413+00:00 bdu:2026-15218 https://cve.radiocsirt.org/vuln/bit-elk-2026-49093 BIT-elk-2026-49093 — Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access 2026-10-04T12:57:35.141451+00:00

Affected: Bitnami: elk

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 certfr-2026-avi-0661 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-10-04T12:57:35.141485+00:00 certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-322889 EUVD-2026-322889 2026-10-04T12:57:35.141503+00:00 EUVD-2026-322889 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49093 fkie_cve-2026-49093 2026-10-04T12:57:35.141514+00:00

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.

 https://cve.radiocsirt.org/vuln/ghsa-qf29-h8cg-2hg4 GHSA-qf29-h8cg-2hg4 2026-10-04T12:57:35.141536+00:00

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734 WID-SEC-W-2026-1734 — Kibana: Mehrere Schwachstellen 2026-10-04T12:57:35.141550+00:00

Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.