https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:31:40.200441+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-26938 CVE-2026-26938 — Improper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Reques… 2026-10-07T05:31:40.201476+00:00

Affected: Elastic Kibana

Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery (SSRF) via Code Injection (CAPEC-242). This requires an authenticated user who has the workflowsManagement:executeWorkflow privilege.