https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:45:14 +0000 https://cve.radiocsirt.org/vuln/cve-2026-0532 <p><strong>Affected:</strong> Elastic Kibana, Red Hat Logging Subsystem for Red Hat OpenShift, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat OpenShift distributed tracing 3, Red Hat OpenStack Platform 16.2</p> <p>External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker to cause arbitrary file disclosure through a specially crafted credentials JSON payload in the Google Gemini connector configuration. This requires an attacker to have authenticated access with privileges sufficient to create or modify connectors (Alerts &amp; Connectors: All). The server processes a configuration without proper validation, allowing for arbitrary network requests and for arbitrary file reads.</p> <p><strong>Affected:</strong> Elastic Kibana, Red Hat Logging Subsystem for Red Hat OpenShift, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat OpenShift distributed tracing 3, Red Hat OpenStack Platform 16.2</p> <p>External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker to cause arbitrary file disclosure through a specially crafted credentials JSON payload in the Google Gemini connector configuration. This requires an attacker to have authenticated access with privileges sufficient to create or modify connectors (Alerts &amp; Connectors: All). The server processes a configuration without proper validation, allowing for arbitrary network requests and for arbitrary file reads.</p> https://cve.radiocsirt.org/vuln/cve-2026-0532