https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:22:20.170879+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elk-2026-78595 BIT-elk-2026-78595 — Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure 2026-10-04T08:22:20.224664+00:00

Affected: Bitnami: elk

Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent metadata and access diagnostic content belonging to agents enrolled in other Kibana spaces.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1113 certfr-2026-avi-1113 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-10-04T08:22:20.224722+00:00 certfr-2026-avi-1113 https://cve.radiocsirt.org/vuln/euvd-2026-363607 EUVD-2026-363607 2026-10-04T08:22:20.224743+00:00 EUVD-2026-363607 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78595 fkie_cve-2026-78595 2026-10-04T08:22:20.224755+00:00

Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent metadata and access diagnostic content belonging to agents enrolled in other Kibana spaces.

 https://cve.radiocsirt.org/vuln/ghsa-xvx8-crx2-xjwv GHSA-xvx8-crx2-xjwv 2026-10-04T08:22:20.224777+00:00

Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent metadata and access diagnostic content belonging to agents enrolled in other Kibana spaces.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3177 WID-SEC-W-2026-3177 — Kibana: Mehrere Schwachstellen 2026-10-04T08:22:20.224793+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um seine Privilegien zu erhöhen, um einen Denial of Service herbeizuführen, sowie um Daten zu manipulieren oder offenzulegen.