https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T11:39:06.802198+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bit-elk-2026-78595 BIT-elk-2026-78595 — Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure 2026-09-28T11:39:06.805032+00:00

Affected: Bitnami: elk

Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent metadata and access diagnostic content belonging to agents enrolled in other Kibana spaces.

 https://db.gcve.eu/vuln/certfr-2026-avi-1113 certfr-2026-avi-1113 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-09-28T11:39:06.805101+00:00 certfr-2026-avi-1113 https://db.gcve.eu/vuln/fkie_cve-2026-78595 fkie_cve-2026-78595 2026-09-28T11:39:06.805129+00:00

Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent metadata and access diagnostic content belonging to agents enrolled in other Kibana spaces.

 https://db.gcve.eu/vuln/ghsa-xvx8-crx2-xjwv GHSA-xvx8-crx2-xjwv 2026-09-28T11:39:06.805160+00:00

Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent metadata and access diagnostic content belonging to agents enrolled in other Kibana spaces.