https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T05:27:27.629008+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06791 bdu:2024-06791 2026-10-17T05:27:27.634252+00:00 bdu:2024-06791 https://cve.radiocsirt.org/vuln/bit-elk-2024-37288 BIT-elk-2024-37288 2026-10-17T05:27:27.634293+00:00

Affected: Bitnami: elk

A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Security’s built-in AI tools https://www.elastic.co/guide/en/security/current/ai-for-security.html  and have configured an Amazon Bedrock connector https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html .

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0746 certfr-2024-avi-0746 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Elles permettent à un attaquant de provoquer une e… 2026-10-17T05:27:27.634340+00:00 certfr-2024-avi-0746 https://cve.radiocsirt.org/vuln/euvd-2026-185880 EUVD-2026-185880 2026-10-17T05:27:27.634364+00:00 EUVD-2026-185880 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37288 fkie_cve-2024-37288 2026-10-17T05:27:27.634382+00:00

A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Security’s built-in AI tools https://www.elastic.co/guide/en/security/current/ai-for-security.html  and have configured an Amazon Bedrock connector https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html .

 https://cve.radiocsirt.org/vuln/ghsa-ph9f-2c4w-rghv GHSA-ph9f-2c4w-rghv 2026-10-17T05:27:27.634418+00:00

A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Security’s built-in AI tools https://www.elastic.co/guide/en/security/current/ai-for-security.html  and have configured an Amazon Bedrock connector https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html .

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2068 WID-SEC-W-2024-2068 — Kibana: Mehrere Schwachstellen ermöglichen Codeausführung 2026-10-17T05:27:27.634454+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um beliebigen Programmcode auszuführen.