https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:20:56 +0000 https://cve.radiocsirt.org/vuln/cve-2025-25015 <p><strong>Affected:</strong> Elastic Kibana</p> <p>Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions &gt;= 8.15.0 and &lt; 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors</p> <p><strong>Affected:</strong> Elastic Kibana</p> <p>Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests. In Kibana versions &gt;= 8.15.0 and &lt; 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors</p> https://cve.radiocsirt.org/vuln/cve-2025-25015