Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:24:12 +0000 CVE-2021-37937 — Elasticsearch privilege escalation https://cve.radiocsirt.org/vuln/cve-2021-37937 <p><strong>Affected:</strong> Elasticsearch</p> <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> <p><strong>Affected:</strong> Elasticsearch</p> <p>An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user.</p> https://cve.radiocsirt.org/vuln/cve-2021-37937