https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:20:03 +0000 https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-78605 <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other authenticated users.</p> <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other authenticated users.</p> https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-78605 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1107 certfr-2026-avi-1107 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1107 https://cve.radiocsirt.org/vuln/euvd-2026-362772 EUVD-2026-362772 https://cve.radiocsirt.org/vuln/euvd-2026-362772 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78605 <p>Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other authenticated users.</p> <p>Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other authenticated users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78605 https://cve.radiocsirt.org/vuln/ghsa-mfgq-fwjq-xx5p <p>Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other authenticated users.</p> <p>Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request Smuggling&#39;) (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other authenticated users.</p> https://cve.radiocsirt.org/vuln/ghsa-mfgq-fwjq-xx5p https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3131 <p>Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3131