https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:20:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15218 bdu:2026-15218 https://cve.radiocsirt.org/vuln/bdu:2026-15218 https://cve.radiocsirt.org/vuln/bit-elk-2026-49093 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.</p> https://cve.radiocsirt.org/vuln/bit-elk-2026-49093 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0661 https://cve.radiocsirt.org/vuln/euvd-2026-322889 EUVD-2026-322889 https://cve.radiocsirt.org/vuln/euvd-2026-322889 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49093 <p>Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.</p> <p>Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49093 https://cve.radiocsirt.org/vuln/ghsa-qf29-h8cg-2hg4 <p>Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.</p> <p>Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.</p> https://cve.radiocsirt.org/vuln/ghsa-qf29-h8cg-2hg4 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734 <p>Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1734