https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T08:03:08.054880+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2022-23708 BIT-elasticsearch-2022-23708 2026-10-19T08:03:08.059591+00:00

Affected: Bitnami: elasticsearch

A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index.

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-191 certfr-2022-avi-191 — De multiples vulnérabilités ont été découvertes dans ElasticSearch et Kibana. Certaines d'entre elles permettent à un a… 2026-10-19T08:03:08.059638+00:00 certfr-2022-avi-191 https://cve.radiocsirt.org/vuln/cnvd-2022-20171 cnvd-2022-20171 2026-10-19T08:03:08.059658+00:00 cnvd-2022-20171 https://cve.radiocsirt.org/vuln/euvd-2026-13869 EUVD-2026-13869 2026-10-19T08:03:08.059671+00:00 EUVD-2026-13869 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23708 fkie_cve-2022-23708 2026-10-19T08:03:08.059682+00:00

A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index.

 https://cve.radiocsirt.org/vuln/ghsa-pgq6-ccqj-hpqr GHSA-pgq6-ccqj-hpqr — Elasticsearch privilege escalation 2026-10-19T08:03:08.059703+00:00

Affected: Maven: org.elasticsearch:elasticsearch

A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index. Users running a cluster on an affected version that had previously been upgraded from 6.x, should upgrade to 7.17.1. Users that are planning to upgrade from 6.x should not perform an upgrade from 6.x to versions 7.16 through 7.17.0 and should use 7.17.1+ for upgrades from 6.x.

 https://cve.radiocsirt.org/vuln/gsd-2022-23708 gsd-2022-23708 2026-10-19T08:03:08.059727+00:00 gsd-2022-23708 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23708 UBUNTU-CVE-2022-23708 2026-10-19T08:03:08.059739+00:00

Affected: Ubuntu:16.04:LTS: elasticsearch

A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index.