https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:36:26 +0000 https://cve.radiocsirt.org/vuln/bit-elasticsearch-2025-37731 <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.</p> <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.</p> https://cve.radiocsirt.org/vuln/bit-elasticsearch-2025-37731 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1112 certfr-2025-avi-1112 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1112 https://cve.radiocsirt.org/vuln/cleanstart-2026-go07314 <p><strong>Affected:</strong> CleanStart: sonarqube</p> <p>Security vulnerability affects the sonarqube package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: sonarqube</p> <p>Security vulnerability affects the sonarqube package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-go07314 https://cve.radiocsirt.org/vuln/euvd-2026-271237 EUVD-2026-271237 https://cve.radiocsirt.org/vuln/euvd-2026-271237 https://cve.radiocsirt.org/vuln/fkie_cve-2025-37731 <p>Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.</p> <p>Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-37731 https://cve.radiocsirt.org/vuln/ghsa-m9gh-789g-q5pv <p><strong>Affected:</strong> Maven: org.elasticsearch.plugin:x-pack-security, Maven: org.elasticsearch.plugin:x-pack-core</p> <p>Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.</p> <p><strong>Affected:</strong> Maven: org.elasticsearch.plugin:x-pack-security, Maven: org.elasticsearch.plugin:x-pack-core</p> <p>Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.</p> https://cve.radiocsirt.org/vuln/ghsa-m9gh-789g-q5pv https://cve.radiocsirt.org/vuln/msrc_cve-2025-37731 msrc_CVE-2025-37731 https://cve.radiocsirt.org/vuln/msrc_cve-2025-37731 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-37731 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: elasticsearch</p> <p>Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: elasticsearch</p> <p>Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-37731 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2841 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Elasticsearch ausnutzen, um die Authentifizierung zu umgehen und sich als andere Benutzer auszugeben.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Elasticsearch ausnutzen, um die Authentifizierung zu umgehen und sich als andere Benutzer auszugeben.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2841