https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:26:57.012735+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15386 bdu:2026-15386 2026-10-07T05:26:57.021002+00:00 bdu:2026-15386 https://cve.radiocsirt.org/vuln/bit-elk-2026-63142 BIT-elk-2026-63142 — Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery 2026-10-07T05:26:57.021046+00:00

Affected: Bitnami: elk

Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by the configured security policy.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0906 certfr-2026-avi-0906 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-07T05:26:57.021093+00:00 certfr-2026-avi-0906 https://cve.radiocsirt.org/vuln/euvd-2026-339326 EUVD-2026-339326 2026-10-07T05:26:57.021120+00:00 EUVD-2026-339326 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63142 fkie_cve-2026-63142 2026-10-07T05:26:57.021139+00:00

Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by the configured security policy.

 https://cve.radiocsirt.org/vuln/ghsa-mq6c-w86q-vpp3 GHSA-mq6c-w86q-vpp3 2026-10-07T05:26:57.021174+00:00

Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by the configured security policy.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2464 WID-SEC-W-2026-2464 — Kibana: Mehrere Schwachstellen 2026-10-07T05:26:57.021200+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand auszulösen oder Daten offenzulegen und zu manipulieren.