https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:20:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15213 bdu:2026-15213 https://cve.radiocsirt.org/vuln/bdu:2026-15213 https://cve.radiocsirt.org/vuln/bit-elk-2026-42398 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.</p> https://cve.radiocsirt.org/vuln/bit-elk-2026-42398 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-322891 EUVD-2026-322891 https://cve.radiocsirt.org/vuln/euvd-2026-322891 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42398 <p>Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.</p> <p>Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42398 https://cve.radiocsirt.org/vuln/ghsa-43ww-gwmw-f89v <p>Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.</p> <p>Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist. By configuring a Webhook connector with a crafted target, an attacker can cause Kibana to issue outbound requests to destinations that the egress restriction controls were intended to block.</p> https://cve.radiocsirt.org/vuln/ghsa-43ww-gwmw-f89v https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734 <p>Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734