https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T21:29:28.102733+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15209 bdu:2026-15209 2026-10-08T21:29:28.108461+00:00 bdu:2026-15209 https://cve.radiocsirt.org/vuln/bit-elk-2026-33458 BIT-elk-2026-33458 — Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure 2026-10-08T21:29:28.108516+00:00

Affected: Bitnami: elk

Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0413 certfr-2026-avi-0413 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-08T21:29:28.108551+00:00 certfr-2026-avi-0413 https://cve.radiocsirt.org/vuln/euvd-2026-290116 EUVD-2026-290116 2026-10-08T21:29:28.108567+00:00 EUVD-2026-290116 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33458 fkie_cve-2026-33458 2026-10-08T21:29:28.108578+00:00

Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.

 https://cve.radiocsirt.org/vuln/ghsa-grxp-xwh4-267v GHSA-grxp-xwh4-267v 2026-10-08T21:29:28.108599+00:00

Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1029 WID-SEC-W-2026-1029 — Kibana: Mehrere Schwachstellen 2026-10-08T21:29:28.108613+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.