https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T20:14:14.146582+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02369 bdu:2025-02369 2026-10-14T20:14:14.212892+00:00 bdu:2025-02369 https://cve.radiocsirt.org/vuln/bit-elk-2025-25015 BIT-elk-2025-25015 — Kibana arbitrary code execution via prototype pollution 2026-10-14T20:14:14.212924+00:00

Affected: Bitnami: elk

Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions >= 8.15.0 and < 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0178 certfr-2025-avi-0178 — Une vulnérabilité a été découverte dans Elastic Kibana. Elle permet à un attaquant de provoquer une exécution de code… 2026-10-14T20:14:14.212957+00:00 certfr-2025-avi-0178 https://cve.radiocsirt.org/vuln/euvd-2026-273518 EUVD-2026-273518 2026-10-14T20:14:14.212973+00:00 EUVD-2026-273518 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25015 fkie_cve-2025-25015 2026-10-14T20:14:14.212984+00:00

Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions >= 8.15.0 and < 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors

 https://cve.radiocsirt.org/vuln/ghsa-r96x-p6v3-j823 GHSA-r96x-p6v3-j823 2026-10-14T20:14:14.213006+00:00

Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions >= 8.15.0 and < 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0487 WID-SEC-W-2025-0487 — Kibana: Schwachstelle ermöglicht Codeausführung 2026-10-14T20:14:14.213021+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um beliebigen Programmcode auszuführen.