https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:10:19.546756+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 certfr-2025-avi-0855 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-02T12:10:19.614750+00:00 certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/euvd-2026-68623 EUVD-2026-68623 2026-10-02T12:10:19.614799+00:00 EUVD-2026-68623 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17247 fkie_cve-2018-17247 2026-10-02T12:10:19.614821+00:00

Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially crafted request capable of leaking content of local files on the Elasticsearch node. This could allow a user to access information that they should not have access to.

 https://cve.radiocsirt.org/vuln/ghsa-ccmr-qj26-845g GHSA-ccmr-qj26-845g — Improper Restriction of XML External Entity Reference in Elasticsearch 2026-10-02T12:10:19.614867+00:00

Affected: Maven: org.elasticsearch:elasticsearch

Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially crafted request capable of leaking content of local files on the Elasticsearch node. This could allow a user to access information that they should not have access to.

 https://cve.radiocsirt.org/vuln/gsd-2018-17247 gsd-2018-17247 2026-10-02T12:10:19.614908+00:00 gsd-2018-17247 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2235 WID-SEC-W-2025-2235 — Elasticsearch: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-02T12:10:19.614927+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Elasticsearch ausnutzen, um Informationen offenzulegen.