https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:45:33 +0000 https://cve.radiocsirt.org/vuln/bit-elk-2026-72670 <p><strong>Affected:</strong> Bitnami: elk</p> <p>A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key material that they should not be authorized to view.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key material that they should not be authorized to view.</p> https://cve.radiocsirt.org/vuln/bit-elk-2026-72670 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1020 certfr-2026-avi-1020 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-352349 EUVD-2026-352349 https://cve.radiocsirt.org/vuln/euvd-2026-352349 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72670 <p>A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key material that they should not be authorized to view.</p> <p>A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key material that they should not be authorized to view.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72670 https://cve.radiocsirt.org/vuln/ghsa-gh7x-jm44-9v5r <p>A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key material that they should not be authorized to view.</p> <p>A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key material that they should not be authorized to view.</p> https://cve.radiocsirt.org/vuln/ghsa-gh7x-jm44-9v5r https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2824 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um vertrauliche Informationen einschließlich Zugangsdaten offenzulegen, Daten und Konfigurationen zu manipulieren, Berechtigungen zu umgehen und einen Denial of Service zu verursachen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um vertrauliche Informationen einschließlich Zugangsdaten offenzulegen, Daten und Konfigurationen zu manipulieren, Berechtigungen zu umgehen und einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2824