https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:17:14.450088+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15334 bdu:2026-15334 2026-10-04T07:17:14.458063+00:00 bdu:2026-15334 https://cve.radiocsirt.org/vuln/bit-elk-2026-49094 BIT-elk-2026-49094 — Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 2026-10-04T07:17:14.458104+00:00

Affected: Bitnami: elk

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit a request containing an oversized input value to an analytics collections management endpoint. Kibana will consume excessive CPU and memory resources while processing the request. This results in Kibana becoming unavailable to all users until the service is manually recovered.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 certfr-2026-avi-0661 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-10-04T07:17:14.458141+00:00 certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-322890 EUVD-2026-322890 2026-10-04T07:17:14.458161+00:00 EUVD-2026-322890 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49094 fkie_cve-2026-49094 2026-10-04T07:17:14.458172+00:00

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit a request containing an oversized input value to an analytics collections management endpoint. Kibana will consume excessive CPU and memory resources while processing the request. This results in Kibana becoming unavailable to all users until the service is manually recovered.

 https://cve.radiocsirt.org/vuln/ghsa-q4c9-4pm6-jq34 GHSA-q4c9-4pm6-jq34 2026-10-04T07:17:14.458212+00:00

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with viewer-level access can submit a request containing an oversized input value to an analytics collections management endpoint. Kibana will consume excessive CPU and memory resources while processing the request. This results in Kibana becoming unavailable to all users until the service is manually recovered.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734 WID-SEC-W-2026-1734 — Kibana: Mehrere Schwachstellen 2026-10-04T07:17:14.458229+00:00

Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.