https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:08:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15207 bdu:2026-15207 https://cve.radiocsirt.org/vuln/bdu:2026-15207 https://cve.radiocsirt.org/vuln/bit-elk-2026-63260 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.</p> https://cve.radiocsirt.org/vuln/bit-elk-2026-63260 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0906 certfr-2026-avi-0906 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0906 https://cve.radiocsirt.org/vuln/euvd-2026-339313 EUVD-2026-339313 https://cve.radiocsirt.org/vuln/euvd-2026-339313 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63260 <p>Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.</p> <p>Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-63260 https://cve.radiocsirt.org/vuln/ghsa-qcp3-347v-7f6g <p>Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.</p> <p>Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.</p> https://cve.radiocsirt.org/vuln/ghsa-qcp3-347v-7f6g https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2464 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand auszulösen oder Daten offenzulegen und zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand auszulösen oder Daten offenzulegen und zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2464