https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T07:21:36.594994+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2025-37731 BIT-elasticsearch-2025-37731 — Elasticsearch Improper Authentication 2026-10-07T07:21:36.689555+00:00

Affected: Bitnami: elasticsearch

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1112 certfr-2025-avi-1112 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Elles permettent à un attaquant de provoquer… 2026-10-07T07:21:36.689609+00:00 certfr-2025-avi-1112 https://cve.radiocsirt.org/vuln/cleanstart-2026-go07314 CLEANSTART-2026-GO07314 — Security fix for CVE-2025-37731 applied in: sonarqube 25.12.0.117093-r2 2026-10-07T07:21:36.689630+00:00

Affected: CleanStart: sonarqube

Security vulnerability affects the sonarqube package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-271237 EUVD-2026-271237 2026-10-07T07:21:36.689650+00:00 EUVD-2026-271237 https://cve.radiocsirt.org/vuln/fkie_cve-2025-37731 fkie_cve-2025-37731 2026-10-07T07:21:36.689662+00:00

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.

 https://cve.radiocsirt.org/vuln/ghsa-m9gh-789g-q5pv GHSA-m9gh-789g-q5pv — Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client Certificat… 2026-10-07T07:21:36.689682+00:00

Affected: Maven: org.elasticsearch.plugin:x-pack-security, Maven: org.elasticsearch.plugin:x-pack-core

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-37731 msrc_CVE-2025-37731 — Elasticsearch Improper Authentication 2026-10-07T07:21:36.689706+00:00 msrc_CVE-2025-37731 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-37731 UBUNTU-CVE-2025-37731 2026-10-07T07:21:36.689722+00:00

Affected: Ubuntu:16.04:LTS: elasticsearch

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2841 WID-SEC-W-2025-2841 — Elasticsearch: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-07T07:21:36.689738+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Elasticsearch ausnutzen, um die Authentifizierung zu umgehen und sich als andere Benutzer auszugeben.