https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 18:36:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06791 bdu:2024-06791 https://cve.radiocsirt.org/vuln/bdu:2024-06791 https://cve.radiocsirt.org/vuln/bit-elk-2024-37288 <p><strong>Affected:</strong> Bitnami: elk</p> <p>A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Security’s built-in AI tools https://www.elastic.co/guide/en/security/current/ai-for-security.html  and have configured an Amazon Bedrock connector https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html .</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Security’s built-in AI tools https://www.elastic.co/guide/en/security/current/ai-for-security.html  and have configured an Amazon Bedrock connector https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html .</p> https://cve.radiocsirt.org/vuln/bit-elk-2024-37288 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0746 certfr-2024-avi-0746 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0746 https://cve.radiocsirt.org/vuln/euvd-2026-185880 EUVD-2026-185880 https://cve.radiocsirt.org/vuln/euvd-2026-185880 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37288 <p>A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Security’s built-in AI tools https://www.elastic.co/guide/en/security/current/ai-for-security.html  and have configured an Amazon Bedrock connector https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html .</p> <p>A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Security’s built-in AI tools https://www.elastic.co/guide/en/security/current/ai-for-security.html  and have configured an Amazon Bedrock connector https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html .</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-37288 https://cve.radiocsirt.org/vuln/ghsa-ph9f-2c4w-rghv <p>A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Security’s built-in AI tools https://www.elastic.co/guide/en/security/current/ai-for-security.html  and have configured an Amazon Bedrock connector https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html .</p> <p>A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document containing a crafted payload. This issue only affects users that use Elastic Security’s built-in AI tools https://www.elastic.co/guide/en/security/current/ai-for-security.html  and have configured an Amazon Bedrock connector https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html .</p> https://cve.radiocsirt.org/vuln/ghsa-ph9f-2c4w-rghv https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2068 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2068