https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:32:25.476447+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elk-2026-26938 BIT-elk-2026-26938 — Improper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Reques… 2026-10-07T10:32:25.547210+00:00

Affected: Bitnami: elk

Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery (SSRF) via Code Injection (CAPEC-242). This requires an authenticated user who has the workflowsManagement:executeWorkflow privilege.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0220 certfr-2026-avi-0220 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-07T10:32:25.547318+00:00 certfr-2026-avi-0220 https://cve.radiocsirt.org/vuln/euvd-2026-273657 EUVD-2026-273657 2026-10-07T10:32:25.547338+00:00 EUVD-2026-273657 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26938 fkie_cve-2026-26938 2026-10-07T10:32:25.547351+00:00

Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery (SSRF) via Code Injection (CAPEC-242). This requires an authenticated user who has the workflowsManagement:executeWorkflow privilege.

 https://cve.radiocsirt.org/vuln/ghsa-9674-77c9-4xpr GHSA-9674-77c9-4xpr 2026-10-07T10:32:25.547374+00:00

Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery (SSRF) via Code Injection (CAPEC-242). This requires an authenticated user who has the workflowsManagement:executeWorkflow privilege.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0078 NCSC-2026-0078 — Kwetsbaarheden verholpen in Kibana 2026-10-07T10:32:25.547389+00:00 NCSC-2026-0078 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0545 WID-SEC-W-2026-0545 — Kibana: Mehrere Schwachstellen ermöglichen Denial of Service und Offenlegung von Informationen 2026-10-07T10:32:25.547412+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.