https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:47:39.020689+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0041 certfr-2026-avi-0041 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-05T21:47:39.073704+00:00 certfr-2026-avi-0041 https://cve.radiocsirt.org/vuln/euvd-2026-265604 EUVD-2026-265604 2026-10-05T21:47:39.073788+00:00 EUVD-2026-265604 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0528 fkie_cve-2026-0528 2026-10-05T21:47:39.073818+00:00

Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input Validation (CWE-20) exists in the Prometheus helper module that can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed metric data.

 https://cve.radiocsirt.org/vuln/ghsa-w2gr-585j-r428 GHSA-w2gr-585j-r428 — Metricbeat affected by multiple denial of service vulnerabilities 2026-10-05T21:47:39.073852+00:00

Affected: Go: github.com/elastic/beats/v7

Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input Validation (CWE-20) exists in the Prometheus helper module that can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed metric data.