https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:38:58 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15386 bdu:2026-15386 https://cve.radiocsirt.org/vuln/bdu:2026-15386 https://cve.radiocsirt.org/vuln/bit-elk-2026-63142 <p><strong>Affected:</strong> Bitnami: elk</p> <p>Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by the configured security policy.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by the configured security policy.</p> https://cve.radiocsirt.org/vuln/bit-elk-2026-63142 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0906 certfr-2026-avi-0906 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0906 https://cve.radiocsirt.org/vuln/euvd-2026-339326 EUVD-2026-339326 https://cve.radiocsirt.org/vuln/euvd-2026-339326 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63142 <p>Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by the configured security policy.</p> <p>Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by the configured security policy.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-63142 https://cve.radiocsirt.org/vuln/ghsa-mq6c-w86q-vpp3 <p>Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by the configured security policy.</p> <p>Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the Reporting feature to bypass outbound request restrictions configured by an administrator, causing the reporting service to send requests to network destinations that should be denied by the configured security policy.</p> https://cve.radiocsirt.org/vuln/ghsa-mq6c-w86q-vpp3 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2464 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand auszulösen oder Daten offenzulegen und zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand auszulösen oder Daten offenzulegen und zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2464