https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:28:43 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15209 bdu:2026-15209 https://cve.radiocsirt.org/vuln/bdu:2026-15209 https://cve.radiocsirt.org/vuln/bit-elk-2026-33458 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.</p> https://cve.radiocsirt.org/vuln/bit-elk-2026-33458 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0413 certfr-2026-avi-0413 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0413 https://cve.radiocsirt.org/vuln/euvd-2026-290116 EUVD-2026-290116 https://cve.radiocsirt.org/vuln/euvd-2026-290116 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33458 <p>Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.</p> <p>Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33458 https://cve.radiocsirt.org/vuln/ghsa-grxp-xwh4-267v <p>Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.</p> <p>Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.</p> https://cve.radiocsirt.org/vuln/ghsa-grxp-xwh4-267v https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1029 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1029