https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:20:43 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15292 bdu:2026-15292 https://cve.radiocsirt.org/vuln/bdu:2026-15292 https://cve.radiocsirt.org/vuln/bit-elk-2026-33462 <p><strong>Affected:</strong> Bitnami: elk</p> <p>A path traversal vulnerability was identified in Kibana&#39;s dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a specially crafted identifier. When an administrator subsequently attempts to delete this dashboard through the Kibana interface, the deletion request is redirected to an unintended internal endpoint, potentially resulting in the unauthorized deletion of user accounts or other resources. Exploitation requires an administrator to perform a delete action on the maliciously crafted dashboard object.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>A path traversal vulnerability was identified in Kibana&#39;s dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a specially crafted identifier. When an administrator subsequently attempts to delete this dashboard through the Kibana interface, the deletion request is redirected to an unintended internal endpoint, potentially resulting in the unauthorized deletion of user accounts or other resources. Exploitation requires an administrator to perform a delete action on the maliciously crafted dashboard object.</p> https://cve.radiocsirt.org/vuln/bit-elk-2026-33462 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-322797 EUVD-2026-322797 https://cve.radiocsirt.org/vuln/euvd-2026-322797 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33462 <p>A path traversal vulnerability was identified in Kibana&#39;s dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a specially crafted identifier. When an administrator subsequently attempts to delete this dashboard through the Kibana interface, the deletion request is redirected to an unintended internal endpoint, potentially resulting in the unauthorized deletion of user accounts or other resources. Exploitation requires an administrator to perform a delete action on the maliciously crafted dashboard object.</p> <p>A path traversal vulnerability was identified in Kibana&#39;s dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a specially crafted identifier. When an administrator subsequently attempts to delete this dashboard through the Kibana interface, the deletion request is redirected to an unintended internal endpoint, potentially resulting in the unauthorized deletion of user accounts or other resources. Exploitation requires an administrator to perform a delete action on the maliciously crafted dashboard object.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33462 https://cve.radiocsirt.org/vuln/ghsa-3j7x-jqgv-84cm <p>A path traversal vulnerability was identified in Kibana&#39;s dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a specially crafted identifier. When an administrator subsequently attempts to delete this dashboard through the Kibana interface, the deletion request is redirected to an unintended internal endpoint, potentially resulting in the unauthorized deletion of user accounts or other resources. Exploitation requires an administrator to perform a delete action on the maliciously crafted dashboard object.</p> <p>A path traversal vulnerability was identified in Kibana&#39;s dashboard management functionality. An authenticated user with limited permissions could create a dashboard with a specially crafted identifier. When an administrator subsequently attempts to delete this dashboard through the Kibana interface, the deletion request is redirected to an unintended internal endpoint, potentially resulting in the unauthorized deletion of user accounts or other resources. Exploitation requires an administrator to perform a delete action on the maliciously crafted dashboard object.</p> https://cve.radiocsirt.org/vuln/ghsa-3j7x-jqgv-84cm https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734 <p>Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734