https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:37:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-02369 bdu:2025-02369 https://cve.radiocsirt.org/vuln/bdu:2025-02369 https://cve.radiocsirt.org/vuln/bit-elk-2025-25015 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions &gt;= 8.15.0 and &lt; 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions &gt;= 8.15.0 and &lt; 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors</p> https://cve.radiocsirt.org/vuln/bit-elk-2025-25015 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0178 certfr-2025-avi-0178 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0178 https://cve.radiocsirt.org/vuln/euvd-2026-273518 EUVD-2026-273518 https://cve.radiocsirt.org/vuln/euvd-2026-273518 https://cve.radiocsirt.org/vuln/fkie_cve-2025-25015 <p>Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions &gt;= 8.15.0 and &lt; 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors</p> <p>Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions &gt;= 8.15.0 and &lt; 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-25015 https://cve.radiocsirt.org/vuln/ghsa-r96x-p6v3-j823 <p>Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions &gt;= 8.15.0 and &lt; 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors</p> <p>Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions &gt;= 8.15.0 and &lt; 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors</p> https://cve.radiocsirt.org/vuln/ghsa-r96x-p6v3-j823 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0487 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Kibana ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0487