https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:21:23 +0000 https://cve.radiocsirt.org/vuln/bit-elk-2026-72681 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> https://cve.radiocsirt.org/vuln/bit-elk-2026-72681 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1020 certfr-2026-avi-1020 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-352380 EUVD-2026-352380 https://cve.radiocsirt.org/vuln/euvd-2026-352380 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72681 <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72681 https://cve.radiocsirt.org/vuln/ghsa-9fww-g6xw-7wv9 <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> <p>Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature&#39;s functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.</p> https://cve.radiocsirt.org/vuln/ghsa-9fww-g6xw-7wv9 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2824 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um vertrauliche Informationen einschließlich Zugangsdaten offenzulegen, Daten und Konfigurationen zu manipulieren, Berechtigungen zu umgehen und einen Denial of Service zu verursachen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um vertrauliche Informationen einschließlich Zugangsdaten offenzulegen, Daten und Konfigurationen zu manipulieren, Berechtigungen zu umgehen und einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2824