https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:05:29.405206+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15385 bdu:2026-15385 2026-10-07T08:05:29.471391+00:00 bdu:2026-15385 https://cve.radiocsirt.org/vuln/bit-elk-2026-63141 BIT-elk-2026-63141 — Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions 2026-10-07T08:05:29.471425+00:00

Affected: Bitnami: elk

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0906 certfr-2026-avi-0906 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-07T08:05:29.471457+00:00 certfr-2026-avi-0906 https://cve.radiocsirt.org/vuln/euvd-2026-339744 EUVD-2026-339744 2026-10-07T08:05:29.471488+00:00 EUVD-2026-339744 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63141 fkie_cve-2026-63141 2026-10-07T08:05:29.471502+00:00

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

 https://cve.radiocsirt.org/vuln/ghsa-m95c-48mw-v3r3 GHSA-m95c-48mw-v3r3 2026-10-07T08:05:29.471524+00:00

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2464 WID-SEC-W-2026-2464 — Kibana: Mehrere Schwachstellen 2026-10-07T08:05:29.471538+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand auszulösen oder Daten offenzulegen und zu manipulieren.