https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:54:31.347527+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-362771 EUVD-2026-362771 2026-10-02T15:54:31.349995+00:00 EUVD-2026-362771 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78608 fkie_cve-2026-78608 2026-10-02T15:54:31.350025+00:00

Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to users holding APM or Fleet administrative privileges.

 https://cve.radiocsirt.org/vuln/ghsa-vrj5-p4wq-m7jc GHSA-vrj5-p4wq-m7jc 2026-10-02T15:54:31.350054+00:00

Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to users holding APM or Fleet administrative privileges.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3145 WID-SEC-W-2026-3145 — Kibana: Mehrere Schwachstellen 2026-10-02T15:54:31.350072+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.