https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:35:38 +0000 https://cve.radiocsirt.org/vuln/bit-elk-2026-0543 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Improper Input Validation (CWE-20) in Kibana&#39;s Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector actions. The application attempts to process specially crafted email format, resulting in complete service unavailability for all users until manual restart is performed.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Improper Input Validation (CWE-20) in Kibana&#39;s Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector actions. The application attempts to process specially crafted email format, resulting in complete service unavailability for all users until manual restart is performed.</p> https://cve.radiocsirt.org/vuln/bit-elk-2026-0543 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0041 certfr-2026-avi-0041 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0041 https://cve.radiocsirt.org/vuln/euvd-2026-265607 EUVD-2026-265607 https://cve.radiocsirt.org/vuln/euvd-2026-265607 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0543 <p>Improper Input Validation (CWE-20) in Kibana&#39;s Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector actions. The application attempts to process specially crafted email format, resulting in complete service unavailability for all users until manual restart is performed.</p> <p>Improper Input Validation (CWE-20) in Kibana&#39;s Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector actions. The application attempts to process specially crafted email format, resulting in complete service unavailability for all users until manual restart is performed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-0543 https://cve.radiocsirt.org/vuln/ghsa-p2g6-3qpg-4v6h <p>Improper Input Validation (CWE-20) in Kibana&#39;s Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector actions. The application attempts to process specially crafted email format, resulting in complete service unavailability for all users until manual restart is performed.</p> <p>Improper Input Validation (CWE-20) in Kibana&#39;s Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector actions. The application attempts to process specially crafted email format, resulting in complete service unavailability for all users until manual restart is performed.</p> https://cve.radiocsirt.org/vuln/ghsa-p2g6-3qpg-4v6h https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0100 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0100