https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T18:58:07.256116+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2026-15410 bdu:2026-15410 2026-10-03T18:58:07.285317+00:00 bdu:2026-15410 https://db.gcve.eu/vuln/bit-elk-2026-72677 BIT-elk-2026-72677 — Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources 2026-10-03T18:58:07.285379+00:00

Affected: Bitnami: elk

Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal (CAPEC-139). Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored as provided and is later incorporated into the request that Kibana issues when that configuration is removed.

 https://db.gcve.eu/vuln/certfr-2026-avi-1020 certfr-2026-avi-1020 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-10-03T18:58:07.285440+00:00 certfr-2026-avi-1020 https://db.gcve.eu/vuln/fkie_cve-2026-72677 fkie_cve-2026-72677 2026-10-03T18:58:07.285468+00:00

Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal (CAPEC-139). Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored as provided and is later incorporated into the request that Kibana issues when that configuration is removed.

 https://db.gcve.eu/vuln/ghsa-xxj8-h2w8-grp8 GHSA-xxj8-h2w8-grp8 2026-10-03T18:58:07.285503+00:00

Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal (CAPEC-139). Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored as provided and is later incorporated into the request that Kibana issues when that configuration is removed.