https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:13:35.861410+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elk-2026-72658 BIT-elk-2026-72658 — Cross-Site Request Forgery in Kibana Leading to Privilege Escalation 2026-10-04T10:13:35.921131+00:00

Affected: Bitnami: elk

Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issued to Kibana in the context of the viewing user's session.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1020 certfr-2026-avi-1020 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-10-04T10:13:35.921193+00:00 certfr-2026-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-352379 EUVD-2026-352379 2026-10-04T10:13:35.921215+00:00 EUVD-2026-352379 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72658 fkie_cve-2026-72658 2026-10-04T10:13:35.921228+00:00

Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issued to Kibana in the context of the viewing user's session.

 https://cve.radiocsirt.org/vuln/ghsa-55cc-rgfq-623v GHSA-55cc-rgfq-623v 2026-10-04T10:13:35.921252+00:00

Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62). A user who is permitted to create visualizations can save a specially crafted Vega visualization that, when it is opened by another user, causes authenticated requests to be issued to Kibana in the context of the viewing user's session.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2824 WID-SEC-W-2026-2824 — Kibana: Mehrere Schwachstellen 2026-10-04T10:13:35.921269+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um vertrauliche Informationen einschließlich Zugangsdaten offenzulegen, Daten und Konfigurationen zu manipulieren, Berechtigungen zu umgehen und einen Denial of Service zu verursachen.